Exact Extract: “Custom API Endpoint: Specify an arbitrary endpoint used to externally start a playbook. Uses a REST API POST action from another system. Supports token-based, basic, and no authentication.”

The correct answers are A and D. A Custom API Endpoint trigger allows an external system to start a FortiSOAR playbook through a defined arbitrary endpoint. It supports token-based authentication, basic authentication, or no authentication, depending on how you configure the trigger. C is wrong because the guide specifies REST API POST, not GET and PUT. B is not supported by the described trigger behavior; the endpoint is configured as a trigger for a playbook, not as a broadcast mechanism to trigger multiple playbooks simultaneously.

Technical Deep Dive: This trigger is useful when an external system cannot use a native FortiSOAR connector but can make an HTTP API call. Common use cases include webhook-style ingestion, third-party alert forwarding, and external workflow integration. Secure it properly; “no authentication” is possible but usually unacceptable in production unless protected by network controls.