8.1 Configure Workflows to Respond to Defined Triggers CCFA Practice Questions (Page 2)

Questions 6–8

1. 6foundation · easy

   What is the primary purpose of testing a workflow trigger?

   • ATo permanently delete the workflow after validation
   • BTo assign permissions to other administrators
   • CTo increase the speed of the workflow execution
   • DTo ensure the workflow executes only when the defined trigger conditions are met
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which of the following is a required parameter when configuring a scheduled trigger?

   • ADetection severity
   • BEvent type
   • CTime zone
   • DFrequency and start time
   Reveal Solution Discussion Select an answer first
3. 8application · medium

   A security team wants a workflow that automatically creates a ticket in their ITSM system whenever a detection with a 'malware' detection type is created. The workflow should not trigger for other detection types. Which trigger type and condition should be used?

   • AEvent trigger with a condition on the event type 'DetectionSummaryEvent' and detection_type 'malware'.
   • BDetection trigger without any conditions, then add a condition in the action to check detection_type.
   • CScheduled trigger with a condition that checks for new malware detections every hour.
   • DDetection trigger with a condition on the 'detection_type' field equal to 'malware'.
   Reveal Solution Discussion Select an answer first