View all questions & answers for the NSE 6 - FortiEDR 7.0 Administrator Exam Materials exam

NSE 6 - FortiEDR 7.0 Administrator Exam Materials - Question #9 Discussion

Comment Image Comment Image Comment Image

A playbook is configured with two actions: terminate process and isolate device. The terminate process action fails because the process is protected by Windows. What is the expected behavior for the second action, isolate device? (Choose one answer)

  • A. The playbook execution pauses and requires administrator intervention.
  • B. The playbook generates a notification email and execution stops.
  • C. The playbook execution stops because the action fails.
  • D. The playbook continues and executes the second action.
Correct Answer: D

Brave-Dump Community Votes

Answer: D (3 votes) 100%

Community Explanations & Comments (3)

Brave-Dumps.com Admin 6 months ago
Selected: D
Explanation — Why this answer?

In FortiEDR, a playbook continues executing even if one action fails.

Playbooks run sequentially, so a failure in one step does not stop the workflow.

Therefore, if “Terminate Process” fails (for example, because the process is protected by Windows), the next action—“Isolate Device”—will still be executed normally.
Anonymous User 6 months ago
Selected: D
In FortiEDR playbook automation, if one action (such as terminate process) fails—unless explicitly configured to stop on error—the playbook continues executing subsequent actions. Thus, after the first action fails due to a protected process, the 'isolate device' action will still execute
Anonymous User 5 months ago
Selected: D
In FortiEDR, a playbook continues executing even if one action fails.
Playbooks run sequentially, so a failure in one step does not stop the workflow.