NSE7 Advanced Threat Protection Practice Question
A security analyst wants to use automation stitches on FortiGate to automatically block an IP address when a critical severity event is logged. Which TWO components are essential to create this automation stitch? (Choose two.)
⚠ Common exam trap
A common mix-up: candidates confuse optional components (like FortiGuard or FortiAnalyzer) with essential ones, mistakenly thinking external services or connectivity are required for the stitch's core trigger and action logic.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
An action that adds the source IP to a firewall address group
An automation stitch in FortiGate requires an action to execute a specific task, such as adding a source IP to a firewall address group, which effectively blocks the IP. This action is essential for enforcing the security response triggered by the stitch.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
A FortiGuard subscription
Why it's wrong here
FortiGuard is not needed for basic automation stitches.
- ✗
A FortiAnalyzer to store logs
Why it's wrong here
FortiAnalyzer is not required for automation stitches on FortiGate.
- ✓
An action that adds the source IP to a firewall address group
Why this is correct
The action defines the response, such as blocking the IP.
- ✗
A static route to the internet
Why it's wrong here
Routing is unrelated to automation stitching.
- ✓
A trigger that matches critical severity logs
Why this is correct
The trigger specifies which events activate the stitch.
Go deeper
Related to this question
About these practice questions
This NSE7 question is part of Courseiva's 940-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.