CCCS-203B · Question #106
When using Falcon Fusion, how can administrators ensure they are notified immediately about critical threats detected in their cloud infrastructure?
The correct answer is A. Configure automated actions in Workflow Builder to trigger notifications. Option A: Workflow Builder is the correct tool for setting up automated actions, such as sending email or webhook notifications, whenever a critical threat is detected. This provides immediate alerts based on predefined criteria. Option B: Threat Graph integration enhances…
Question
When using Falcon Fusion, how can administrators ensure they are notified immediately about critical threats detected in their cloud infrastructure?
Options
- AConfigure automated actions in Workflow Builder to trigger notifications.
- BIntegrate Falcon Fusion with CrowdStrike Threat Graph for alerts.
- CSet up recurring reports in the Falcon Dashboard.
- DActivate the Immediate Alert Policy in Falcon Central.
How the community answered
(33 responses)- A73% (24)
- B15% (5)
- C9% (3)
- D3% (1)
Explanation
Option A: Workflow Builder is the correct tool for setting up automated actions, such as sending email or webhook notifications, whenever a critical threat is detected. This provides immediate alerts based on predefined criteria. Option B: Threat Graph integration enhances threat intelligence and event correlation but does not directly configure real-time notifications in Falcon Fusion workflows. Option C: Recurring reports can provide regular updates, but they are not real-time notifications and are therefore unsuitable for immediate threat alerts. Option D: There is no "Immediate Alert Policy" in Falcon Central. Notifications are handled within Falcon Fusion workflows, not through a standalone policy in Falcon Central.
Topics
Community Discussion
No community discussion yet for this question.