nerdexam
CrowdStrike

CCFA-200B · Question #210

You will be testing detections with pentest and security tooling on your host. How can a workflow be created to automatically assign any detection related to your pentest to yourself in real time?

The correct answer is C. Create an Event trigger workflow that triggers on an EPP Detection with conditions looking for the. You've hit your limit · resets 12:50am (America/New_York)

Fusion SOAR Workflow Automation

Question

You will be testing detections with pentest and security tooling on your host. How can a workflow be created to automatically assign any detection related to your pentest to yourself in real time?

Options

  • ACreate a workflow to disable detections for your host until testing is done
  • BCreate an Event trigger workflow that triggers on an EPP Detection with an action to assign the
  • CCreate an Event trigger workflow that triggers on an EPP Detection with conditions looking for the
  • DCreate a scheduled workflow to run once a day that triggers on an EPP Detection with conditions

How the community answered

(15 responses)
  • A
    7% (1)
  • B
    27% (4)
  • C
    60% (9)
  • D
    7% (1)

Explanation

You've hit your limit · resets 12:50am (America/New_York)

Topics

#Fusion SOAR#event trigger workflows#detection assignment#pentest automation

Community Discussion

No community discussion yet for this question.

Full CCFA-200B Practice