CrowdStrike CCFA: What Triggers Cause CrowdStrike Fusion Workflows to Run?

Learn about the two types of triggers – event and scheduled – that can automatically initiate a Fusion workflow in the CrowdStrike Falcon platform. Prepare for the CrowdStrike CCFA certification exam with this sample question and detailed explanation of the correct answer.

Question

What are the two triggers that cause a fusion workflow to run?

A. Fusion workflows are manually ran
B. Event and scheduled triggers
C. Condition and action triggers
D. Incident and detections triggers

Answer

B. Event and scheduled triggers

Explanation

There are two types of triggers that can automatically cause a Fusion workflow to run:

1. Event triggers – An event trigger initiates a workflow when a specific event occurs in the CrowdStrike Falcon platform, such as a new detection being generated or a host being newly discovered. The workflow will run each time the specified event takes place.
2. Scheduled triggers – A scheduled trigger runs a workflow based on a configured time interval, such as every hour or once per day at a set time. This allows workflows to execute on a recurring schedule, even if no event trigger has occurred.

Scheduled and event triggers enable automation by allowing workflows to run without manual intervention. Analysts can define the triggers to automatically initiate responsive actions, notifications, data enrichment, and other workflow steps based on either security events or a predetermined schedule.

The other answer options are incorrect because:

• Fusion workflows are not only manually run (A), they can be automatically triggered
• Condition and action are parts of a workflow (C), not triggers themselves
• Incidents and detections (D) are examples of events that could be used in an event trigger, but do not encompass all trigger types since scheduled triggers are not event-based

So in summary, the two types of triggers that cause a Fusion workflow to run automatically are event triggers and scheduled triggers (B). Mastering how triggers work is key to leveraging the power of automation through CrowdStrike Fusion workflows.

CrowdStrike CCFA certification exam assessment practice question and answer (Q&A) dump including multiple choice questions (MCQ) and objective type questions, with detail explanation and reference available free, helpful to pass the CrowdStrike CCFA exam and earn CrowdStrike CCFA certification.