exam questions

Exam CCFA All Questions

View all questions & answers for the CCFA exam

Exam CCFA topic 1 question 77 discussion

Actual exam question from CrowdStrike's CCFA
Question #: 77
Topic #: 1
[All CCFA Questions]

You have an existing workflow that is triggered on a critical detection that sends an email to the escalation team. Your CISO has asked to also be notified via email with a customized message. What is the best way to update the workflow?

  • A. Clone the workflow and replace the existing email with your CISO's email
  • B. Add a sequential action to send a custom email to your CISO
  • C. Add a parallel action to send a custom email to your CISO
  • D. Add the CISO's email to the existing action
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
sbag0024
1 year, 5 months ago
Selected Answer: C
Going with C, Tested in lab but workflows seem to be redone and and could be a sequential or parallel dependent on where you put it in the work flow.. Bad question
upvoted 2 times
...
FerbOP
1 year, 7 months ago
Selected Answer: C
Checked C is correct answer
upvoted 1 times
Maharshraval
1 year, 7 months ago
CAN YOU PLEASE EXPLAIN WHY its C?
upvoted 1 times
Brian9296
1 year ago
As C is "parallel" action, no dependency of previous action. Imagine if the previous action failed, then the sequential action will not be execute. And parallel action ensured that the IT team and CISO team able to receive the alert email at the same time. So "C" should be the most appropriate option.
upvoted 1 times
...
...
...
Dave071
1 year, 8 months ago
Answer is D. Simply add new email to the existing "Send email" Action.
upvoted 2 times
TommyJ111
1 year, 5 months ago
The CISO requests a customized message, so D is wrong.
upvoted 2 times
...
...
testmailuc
1 year, 9 months ago
Selected Answer: C
We did that.in action and we went with option C
upvoted 1 times
...
andreiushu
1 year, 9 months ago
Selected Answer: C
I think it's C
upvoted 2 times
...
Reddington0214
1 year, 10 months ago
Selected Answer: C
C is much more correct. What you think?
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...