CCFA-200B: CrowdStrike Certified Falcon AdministratorDemo

By CrowdStrike · Question Mode

QuestionQ48

Workflows

You can build Fusion SOAR workflows to precisely specify the actions you want Falcon to take in response to incidents.

Which three items must be defined in every trigger for it to execute successfully?

  • A Trigger, Condition, Action
  • B Rule Type, Condition, Action
  • C Rule Type, Filter, Objective
  • D Trigger, Filter, Objective
Explanation

A Fusion SOAR trigger must define its rule type, the condition that determines when the rule matches, and the action Falcon performs when that condition is met.

Community Discussion

No comments yet. Be the first to start the discussion!