QuestionQ53

Remediating and Reporting Issues

A security engineer needs to configure Falcon Fusion SOAR workflows to alert the DevOps team about failed Infrastructure as Code (IaC) assessments.

What is a key requirement for configuring these workflows?

  • A Define triggers based on IaC assessment results to automate notifications to the appropriate individuals
  • B Rely on manual monitoring of IaC assessment results and send notifications on an ad-hoc basis
  • C Configure SOAR workflows to block all IaC deployments automatically, regardless of assessment results
  • D Set up workflows to notify the entire organization about all IaC failures to maximize visibility
Explanation

A workflow must define triggers based on IaC assessment results so that a failed assessment automatically initiates a notification to the appropriate DevOps recipients. This provides targeted, event-driven response rather than manual or indiscriminate actions.

Community Discussion

No comments yet. Be the first to start the discussion!