CCFA-200B: CrowdStrike Certified Falcon Administrator

By CrowdStrike · Question Mode

QuestionQ149

VerifiedWorkflows

To strengthen the organization’s security posture, you are designing a Fusion SOAR workflow that generates an alert when Falcon detects critical vulnerabilities.

When building a new workflow from scratch, which workflow component must be configured first?

Explanation

A trigger initiates a Fusion SOAR workflow in response to a platform event, on a schedule, or on demand. Actions and conditions are configured as subsequent workflow logic; an alert can be a triggering event type but is not the required first workflow component.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!