View all questions & answers for the NSE 7 - Security Operations 7.6 Architect Materials exam

NSE 7 - Security Operations 7.6 Architect Materials - Question #61 Discussion

Comment Image Comment Image Comment Image

A FortiSOAR playbook includes a Wait step that is configured to pause execution after initiating a reputation lookup on an indicator. Which two configurations of the Wait step are valid? (Choose two answers)

  • A. The playbook resumes when a specified amount of time has elapsed.
  • B. The playbook resumes when the indicator record is updated.
  • C. The Wait step can retry a specific step in the playbook at scheduled intervals until it succeeds.
  • D. The Wait step, during the AWAITING state, can execute child playbooks.
Correct Answer: A,B

Brave-Dump Community Votes

Answer: A, B (2 votes) 66.67%
Answer: C, D (1 vote) 33.33%

Community Explanations & Comments (3)

Simon Cliffe 8 months ago
Selected: C, D
– C & D Reason – A- Resume after a fixed time -- A Wait step is NOT a timer step. FortiSOAR uses Delay or Sleep for time‑based pausing, not Wait.
B — Resume when indicator record is updated - A Wait step does not automatically monitor record updates. That behaviour belongs to Record Change Triggers, not Wait.
Anonymous User 7 months ago
Selected: A, B
AB
Anonymous User 6 months ago
Selected: A, B
From page 179 of the study guide:

"Use the Wait step to specify the time that the playbook should wait after a specific step before continuing with the remaining steps in the playbook. Alternatively, specify the conditions that must be met before the playbook continues."