CCFA-200B: CrowdStrike Certified Falcon Administrator

By CrowdStrike · Question Mode

QuestionQ41

VerifiedWorkflows

To strengthen the organization’s security posture, you are designing a Fusion SOAR workflow that generates an alert when Falcon detects critical vulnerabilities.

When building a new workflow from scratch, which workflow component must be configured first?

Explanation

A trigger defines the event that starts a Fusion SOAR workflow. Conditions can evaluate the data after the workflow is initiated, and actions such as generating an alert run only after a trigger starts the workflow.

Community Discussion

No comments yet. Be the first to start the discussion!