Fortinet NSE 7 - Security Operations 7.6 Architect

Refer to the exhibit. What are the two mistakes in the incident subpattern rule configuration? (Choose two.)

When you use a manual trigger to save user input as a variable, what is the correct Jinja expression to reference the variable?

Which two phases are part of the FortiSOAR incident handling process but are not phases in the NIST 800-61 revision 2 model? (Choose two.)

When configuring an Ingest Bulk Feed playbook step, which two restrictions must you consider? (Choose two.)

You want to automate a workflow on FortiSOAR so that whenever an incident with critical severity is moved to the containment phase, it is automatically reassign...