View all questions & answers for the NSE 7 - Security Operations 7.6 Architect Materials exam


NSE 7 - Security Operations 7.6 Architect Materials-Question 3 Discussion

Refer to the exhibit. How do you add a piece of evidence to the Action Logs Marked As Evidence area? (Choose one answer)

  • A. By tagging output or a workspace comment with the keyword Evidence
  • B. By linking an indicator to the war room
  • C. By creating an evidence collection task and attaching a file
  • D. By executing a playbook with the Save Execution Logs option enabled
Correct Answer: A

Brave-Dump Clients Votes

A 66.67%
D 33.33%

Comments



Tshepo 2025-12-10 21:30:45

Selected Answers: A


Correct Answer: A. By tagging output or a workspace comment with the keyword Evidence

mohammed abdul salam 2026-03-19 03:37:21

Selected Answers: D


Playbook with “Save Execution Logs”

The section is called “Action Logs Marked As Evidence”

This means:

Evidence is automatically created from playbook execution logs

When Save Execution Logs is enabled → logs are stored as evidence

Anonymous User 2026-04-13 20:30:00

Selected Answers: A


Ref: https://docs.fortinet.com/document/fortisoar/7.6.5/user-guide/841633/war-room#Dashboard

###You can also add the Evidence tag, to mark the result as evidence, which then gets added to the Evidences tab within Investigate.###
  • Muhammad Faizan Yousaf 2026-04-22 10:16:28
    Agreed