Exam CCFA All QuestionsBrowse all questions from this exam
Question 77

You have an existing workflow that is triggered on a critical detection that sends an email to the escalation team. Your CISO has asked to also be notified via email with a customized message. What is the best way to update the workflow?

    Correct Answer: C

    To ensure that the CISO receives the email with a customized message regardless of the status of the existing action and without disrupting the original workflow's sequence, adding a parallel action is the most efficient approach. This way, both the escalation team and the CISO will receive their respective emails simultaneously, ensuring prompt notification.

Discussion
Reddington0214Option: C

C is much more correct. What you think?

sbag0024Option: C

Going with C, Tested in lab but workflows seem to be redone and and could be a sequential or parallel dependent on where you put it in the work flow.. Bad question

Dave071Option: D

Answer is D. Simply add new email to the existing "Send email" Action.

TommyJ111

The CISO requests a customized message, so D is wrong.

andreiushuOption: C

I think it's C

FerbOPOption: C

Checked C is correct answer

Maharshraval

CAN YOU PLEASE EXPLAIN WHY its C?

Brian9296

As C is "parallel" action, no dependency of previous action. Imagine if the previous action failed, then the sequential action will not be execute. And parallel action ensured that the IT team and CISO team able to receive the alert email at the same time. So "C" should be the most appropriate option.

testmailucOption: C

We did that.in action and we went with option C