253 questions with instant explanations, domain breakdown, and wrong-answer analysis. Built for the real exam.
This is exactly what you see during practice — question, options, and a full explanation after you answer.
Which THREE components are required to create a functional FortiSoC Playbook?
A FortiSoC playbook requires Workflow Actions (A), which are the individual executable steps such as running a CLI command, querying a log, or sending a notification that define what the playbook actually does. It also requires a Target Connector/Device (D), which specifies the e…Read full explanation
You are configuring an Event Handler to monitor for failed login attempts. To ensure you do not receive too many alerts for the same source IP in a short duration, what should you configure?
Event rate limiting in FortiAnalyzer's Event Handler configuration sets a threshold on how many times a matching event can trigger alerts within a specified time window. This prevents alert fatigue by suppressing duplicate notifications for the same source IP or event type in a s…Read full explanation
You are troubleshooting a scenario where an Event Handler is not triggering as expected. What is the most effective way to verify if the logs are matching the filter criteria defined in the handler?
The 'Test' button in the Event Handler definition allows the administrator to run the handler's filter against existing logs and see which entries match, without waiting for a real-time trigger. This directly validates whether the filter criteria (log type, severity, field condit…Read full explanation
Questions are tagged by exam domain. Practice a specific domain or mix them all.
Answer at your own pace. Explanation and domain tag shown immediately after each answer.
Countdown timer starts immediately. Results and domain scores shown at the end — just like the real exam.
Full explanations on every question
Not just the right answer — you get exactly why each wrong option is wrong, so you learn the concept, not the answer.
Domain score breakdown
After each session see your score by exam domain so you know exactly where to focus study time.
100% free, forever
No subscription, no trial, no email wall. Start a session in under 10 seconds.
Exam-style questions
Scenario-based, precise wording, realistic distractors — written to match what you actually see on exam day.