NSE7 Advanced Threat Protection Practice Question
A security administrator wants to implement automated threat response using FortiGate automation stitches. Which THREE components are mandatory when creating an automation stitch? (Choose three.)
⚠ Common exam trap
A common mix-up: candidates confuse 'mandatory components' with 'required fields in the GUI' — the stitch name is a required field in the GUI but is not a functional component of the automation logic, while the condition is often overlooked as optional but is considered mandatory in the NSE7 exam because it is essential for practical threat response filtering.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Action (e.g., 'CLI Script', 'Add IP to Blocklist')
An automation stitch requires at least one action to execute when triggered. Actions define the actual response, such as running a CLI script, adding an IP to a blocklist, or sending an email. Without an action, the stitch would have no effect on the network.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Schedule (e.g., daily at midnight)
Why it's wrong here
Schedules are for recurring tasks, not event-driven.
- ✗
Stitch name
Why it's wrong here
While a name is required in configuration, the question asks for mandatory components that make the stitch functional.
- ✓
Action (e.g., 'CLI Script', 'Add IP to Blocklist')
Why this is correct
What happens when the stitch fires.
- ✓
Trigger (e.g., 'Event Log' or 'FortiOS CLI')
Why this is correct
Defines what initiates the stitch.
- ✓
Condition (e.g., filter on event type)
Why this is correct
Determines whether the action runs based on the trigger.
Go deeper
Related to this question
About these practice questions
One of 940 original NSE7 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.