CCFA: CrowdStrike Certified Falcon Administrator

By CrowdStrike · Question Mode

QuestionQ169

VerifiedWorkflows

You can create Fusion SOAR workflows to precisely specify the actions you want Falcon to take in response to incidents.

Which three items must be defined in each trigger for it to execute successfully?

Explanation

A Fusion SOAR trigger requires a rule type, a condition that evaluates the relevant event or incident criteria, and an action to execute when that condition is met.

Community Discussion

No comments yet. Be the first to start the discussion!