Which statement about the FortiSOAR management extension is correct?

The FortiSOAR management extension is an application that runs directly on the FortiAnalyzer platform. FortiAnalyzer leverages containerization to host management extensions, and they are specifically implemented as Docker containers. This architecture allows for the isolated and secure deployment of additional functionalities, such as a feature-limited version of FortiSOAR, without requiring a separate appliance or VM. The extension utilizes the resources of the FortiAnalyzer and integrates with its Security Fabric data to provide Security Orchestration, Automation, and Response (SOAR) capabilities.

A: The FortiSOAR extension on FortiAnalyzer does not require FortiManager. It operates within the FortiAnalyzer environment to automate responses based on events and logs collected by FortiAnalyzer.

B: The extension provides a built-in version of FortiSOAR on the FortiAnalyzer itself, negating the need for a separate, dedicated FortiSOAR device or VM for its core function.

C: A 7-day trial license is included by default for the FortiSOAR management extension, allowing administrators to evaluate its features before committing to a full license.

1. FortiAnalyzer 7.4 Administration Guide

Page 411

"Management Extensions" section. It states

"Management Extensions are applications that run on FortiAnalyzer as Docker containers." This directly supports the correct answer (D).

2. FortiAnalyzer 7.4 Administration Guide

Page 412

"FortiSOAR" section. It states

"The FortiSOAR management extension on FortiAnalyzer provides a subset of FortiSOAR features..." and "A 7-day trial license is available for the FortiSOAR management extension on FortiAnalyzer." This refutes options B and C.

3. FortiAnalyzer 7.4 Administration Guide

Page 412

"FortiSOAR" section. The description of the extension's functionality and integration with FortiAnalyzer makes no mention of FortiManager as a prerequisite

refuting option A.