CCSE: CrowdStrike Certified SIEM EngineerDemo

By CrowdStrike · Question Mode

QuestionQ52

Data Ingestion and Connectors

You need to ingest a data source into Next-Gen SIEM. A prebuilt Pull connector is available.

What is needed to configure the connector?

  • A HEC token
  • B Falcon Log Collector hostname
  • C Falcon API URL
  • D Data Source API key
Explanation

A Pull connector authenticates to and retrieves data from the external source, so configuration requires that data source’s API key. HEC credentials and Falcon ingestion endpoint details are used to send data into Falcon rather than to authorize retrieval from the source.

Community Discussion

No comments yet. Be the first to start the discussion!