CCFA Exam QuestionsBrowse all questions from this exam

CCFA Exam - Question 77


You have an existing workflow that is triggered on a critical detection that sends an email to the escalation team. Your CISO has asked to also be notified via email with a customized message. What is the best way to update the workflow?

Show Answer
Correct Answer: C

To ensure that the CISO receives the email with a customized message regardless of the status of the existing action and without disrupting the original workflow's sequence, adding a parallel action is the most efficient approach. This way, both the escalation team and the CISO will receive their respective emails simultaneously, ensuring prompt notification.

Discussion

6 comments
Sign in to comment
Reddington0214Option: C
Feb 6, 2023

C is much more correct. What you think?

andreiushuOption: C
Feb 16, 2023

I think it's C

Dave071Option: D
Mar 30, 2023

Answer is D. Simply add new email to the existing "Send email" Action.

TommyJ111
Jun 28, 2023

The CISO requests a customized message, so D is wrong.

sbag0024Option: C
Jun 14, 2023

Going with C, Tested in lab but workflows seem to be redone and and could be a sequential or parallel dependent on where you put it in the work flow.. Bad question

testmailucOption: C
Mar 3, 2023

We did that.in action and we went with option C

FerbOPOption: C
Apr 26, 2023

Checked C is correct answer

Maharshraval
Apr 29, 2023

CAN YOU PLEASE EXPLAIN WHY its C?

Brian9296
Nov 29, 2023

As C is "parallel" action, no dependency of previous action. Imagine if the previous action failed, then the sequential action will not be execute. And parallel action ensured that the IT team and CISO team able to receive the alert email at the same time. So "C" should be the most appropriate option.