Which of the following is an example of a trigger condition in a Falcon workflow?

Detection severity equals 'High'

What is the purpose of adding conditions to a workflow trigger?

To specify which actions the workflow should take

To set the frequency of the trigger

To determine the order in which multiple workflows run

To filter which events or data cause the workflow to execute

An administrator has just configured a new workflow with a Detection trigger and a condition that filters for detections on a specific host group. Before enabling it in production, the administrator wants to verify that the workflow will actually fire when a matching detection occurs. What is the most appropriate way to test this?

Enable the workflow and wait for a real detection to occur on a matching host.

Use the workflow's 'Test' feature to simulate a detection with the matching host group and verify the workflow runs.

Review the workflow's execution history to see if it has fired in the past.

Create a test detection manually in the Falcon console and see if the workflow fires.

CrowdStrikeCertified Falcon Administrator (CCFA)

Domain 8Objective 1

8.1 Configure Workflows to Respond to Defined Triggers CCFA Practice Questions (Page 1)

Part of the Workflows domain, which makes up ~2% of our current practice bank.

8questions here

2free pages

4concepts

Questions 1–5

1foundation · easy
Which of the following is an example of a trigger condition in a Falcon workflow?
Select an answer first
2foundation · easy
Which trigger type would you choose to run a workflow every day at 2:00 AM?
Select an answer first
3foundation · easy
What is the purpose of adding conditions to a workflow trigger?
Select an answer first
4foundation · easy
Which of the following is a valid trigger type that can initiate a Falcon workflow?
Select an answer first
5application · medium
An administrator has just configured a new workflow with a Detection trigger and a condition that filters for detections on a specific host group. Before enabling it in production, the administrator wants to verify that the workflow will actually fire when a matching detection occurs. What is the most appropriate way to test this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCFA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CrowdStrike. “CCFA” is a trademark of its owner, used for identification only.

8.1 Configure Workflows to Respond to Defined Triggers CCFA Practice Questions (Page 1)

Questions 1–5

Which of the following is an example of a trigger condition in a Falcon workflow?

Which trigger type would you choose to run a workflow every day at 2:00 AM?

What is the purpose of adding conditions to a workflow trigger?

Which of the following is a valid trigger type that can initiate a Falcon workflow?

Keep studying — Workflows