View all questions & answers for the NSE 6 - FortiEDR 7.0 Administrator Exam Materials exam


NSE 6 - FortiEDR 7.0 Administrator Exam Materials-Question 9 Discussion

A playbook is configured with two actions: terminate process and isolate device. The terminate process action fails because the process is protected by Windows. What is the expected behavior for the second action, isolate device? (Choose one answer)

  • A. The playbook execution pauses and requires administrator intervention.
  • B. The playbook generates a notification email and execution stops.
  • C. The playbook execution stops because the action fails.
  • D. The playbook continues and executes the second action.
Correct Answer: D

Brave-Dump Clients Votes

D 100%

Comments



Brave-Dumps.com Admin 2026-04-19 22:20:15

Selected Answers: D


Explanation — Why this answer?

In FortiEDR, a playbook continues executing even if one action fails.

Playbooks run sequentially, so a failure in one step does not stop the workflow.

Therefore, if “Terminate Process” fails (for example, because the process is protected by Windows), the next action—“Isolate Device”—will still be executed normally.

Salon Raj Joshi 2026-04-22 12:26:29

Selected Answers: D


In FortiEDR playbook automation, if one action (such as terminate process) fails—unless explicitly configured to stop on error—the playbook continues executing subsequent actions. Thus, after the first action fails due to a protected process, the 'isolate device' action will still execute