7.3 Describe the Purpose and Use Requirements of CrowdStrike Falcon® Fusion SOAR Workflows to Notify Individuals About Cloud-Related Policies, Detections, Incidents, Infrastructure as Code and Image Assessments CCCS Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which condition is necessary for a Falcon Fusion SOAR workflow to send a notification to an individual?

   • AThe individual must have an active Falcon sensor installed on their device.
   • BThe workflow must be triggered by a critical severity event only.
   • CThe individual must be a Falcon administrator.
   • DThe workflow must have a notification action configured with the recipient's contact details.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which statement best describes the role of Falcon Fusion SOAR workflows in handling cloud security incidents?

   • AThey provide a manual checklist for analysts to follow during incident response.
   • BThey only generate reports after an incident has been resolved.
   • CThey automatically execute predefined response actions when certain cloud-related triggers occur.
   • DThey replace the need for any human involvement in cloud security operations.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is a typical use case for a SOAR workflow notification related to image assessments?

   • AAutomatically changing the image's base OS.
   • BSending a daily summary of all images in the registry.
   • CBlocking all deployments until the image is reviewed.
   • DNotifying the security team when a container image has a critical vulnerability.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is a typical use case for a Falcon Fusion SOAR workflow related to cloud policies?

   • ANotifying security administrators when a cloud policy is updated.
   • BCreating a new cloud account for each policy violation.
   • CDeleting all resources that violate the policy.
   • DAutomatically enforcing the policy by changing cloud configurations.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What information is typically included in a Falcon Fusion SOAR notification about a cloud detection?

   • AThe full source code of the affected cloud application.
   • BThe IP address of every device in the organization.
   • CThe severity of the detection and contextual details about the event.
   • DThe personal credentials of the user who triggered the detection.
   Reveal Solution Discussion Select an answer first