View all questions & answers for the NSE 7 - Security Operations 7.6 Architect Materials exam

NSE 7 - Security Operations 7.6 Architect Materials - Question #11 Discussion

Comment Image Comment Image Comment Image
Question Diagram

Refer to the exhibit. You configured a playbook named False Positive Close, and want to run it to verify if it works. However, when you click Execute and search for the playbook, you do not see it listed. Which two reasons could be the cause of the problem? (Choose two answers)

  • A. The playbook must first be published using the Application Editor.
  • B. Another instance of the playbook is currently executing.
  • C. The Alerts module is not among the list of modules the playbook can execute on.
  • D. The manual trigger is configured to require record input to run.
Correct Answer: C,D

Brave-Dump Community Votes

Answer: C, D (2 votes) 66.67%
Answer: A, C (1 vote) 33.33%

Community Explanations & Comments (3)

Wellknown 11 months ago
Selected: A, C
A,C
Anonymous User 7 months ago
Selected: C, D
CD
Anonymous User 6 months ago
Selected: C, D
The reason for choosing D: In the figure, no alert record is selected (both checkboxes are unchecked). If the playbook's manual trigger has "Requires record input to run" enabled, FortiSOAR hides it from the Execute list when there's no record selected — because it can't run without one.