CCSE: CrowdStrike Certified SIEM EngineerDemo

By CrowdStrike · Question Mode

QuestionQ1

Incident Workbench and SIEM Alerts

Which three System alerts are enabled by default in Next-Gen SIEM for third-party connectors?

  • A Alert if connector receives no data in 24 hoursAlert if connector is disconnectedResolve alerts within 30 days
  • B Alert if daily data ingestion limit exceededAlert if monthly data ingestion limit is exceededResolve alerts within 30 days
  • C Alert if connector is disconnectedAlert if daily data ingestion limit exceededAlert if monthly data ingestion limit is exceeded
  • D Alert if connector receives no data in 24 hoursAlert if daily data ingestion limit exceededAlert if monthly data ingestion limit is exceeded
Explanation

The default third-party connector system alerts cover a connector receiving no data for 24 hours, a connector becoming disconnected, and automatically resolving alerts within 30 days. Data-ingestion-limit alerts are not enabled by default.

Community Discussion

No comments yet. Be the first to start the discussion!