Question 33 - FCP_FAZ_AN-7.4 discussion

In FortiAnalyzer, when a playbook is run, each task's status impacts the overall playbook status. Here's what happens based on task outcomes:

Status When All Tasks Succeed:

If all tasks finish successfully, the playbook status is marked as Success.

Status When Some Tasks Fail:

If one or more tasks in the playbook fail, but others succeed, the playbook status generally changes to Attention required. This status indicates that the playbook completed execution but requires review due to one or more tasks failing.

This is different from a complete Failed status, which is used if the playbook cannot proceed due to a critical error in an early task, often one that upstream tasks depend on.

Option Analysis:

A . Attention required: This is correct as the playbook has completed, but with partial success and a task requiring review.

B . Upstream_failed: This status is used if a task cannot run because a prerequisite or 'upstream' task failed. Since four out of five tasks completed, this is not the case here.

C . Failed: This status would imply that the playbook completely failed, which does not match the scenario where only one task out of five failed.

D . Success: This status would apply if all tasks had completed successfully, which is not the case here.

Conclusion:

Correct Answe r : A. Attention required

The playbook status reflects that it completed, but an error occurred in one of the tasks, prompting the administrator to review the failed task.

FortiAnalyzer 7.4.1 documentation on playbook execution statuses and task error handling.