CrowdStrike Certified Falcon Administrator (CCFA) — Question 206

You can create Fusion SOAR workflows to precisely define the actions you want Falcon to perform in response to incidents.

Which three items must be defined in every trigger so that it executes successfully?

Answer options

• A. Trigger, Condition, Action
• B. Rule Type, Condition, Action
• C. Trigger, Filter, Objective
• D. Rule Type, Filter, Objective

Correct answer: A

Explanation

The correct answer is A, as every trigger must include a Trigger to initiate the workflow, a Condition to assess when the trigger should activate, and an Action to define what should happen next. The other options do not include the necessary components that are required for a trigger to execute successfully.