CrowdStrike Exam CCFH-202 Topic 7 Question 28 Discussion

Actual exam question for CrowdStrike's CCFH-202 exam

Question #: 28
Topic #: 7

With Custom Alerts you are able to configure email alerts using predefined templates so you're notified about specific activity in your environment. Which of the following outlines the steps required to properly create a custom alert rule?

AChoose the template you would like to configure, setup how often you would like the alert to run, and then schedule the alert

BChoose the template you would like to configure, preview the search results, and then schedule the alert

CCreate the query for the alert, setup the email template for the alert, and then set the schedule for the alert

DCreate a new custom template, configure the email template, and then create the custom query for the alert

Show Suggested Answer

Suggested Answer: B

These are the steps required to properly create a custom alert rule. Custom Alerts are a feature that allows you to configure email alerts using predefined templates so you're notified about specific activity in your environment. You can choose from various templates that cover different use cases, such as suspicious PowerShell activity, network connections to risky countries, etc. You can also preview the search results of the template before scheduling the alert. You do not need to create the query for the alert, setup the email template for the alert, or create a new custom template, as these are already provided by the predefined templates.

by Colby at Sep 15, 2024, 08:29 AM

Limited Time Offer

25%

Off

Get Premium CCFH-202 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Florencia

2 months ago

Wait, where's the 'All of the above' option? That's usually the right answer for these types of questions!

upvoted 0 times

Hoa

19 days ago

C) Create the query for the alert, setup the email template for the alert, and then set the schedule for the alert

upvoted 0 times

...

Janet

22 days ago

B) Choose the template you would like to configure, preview the search results, and then schedule the alert

upvoted 0 times

...

Louann

1 months ago

A) Choose the template you would like to configure, setup how often you would like the alert to run, and then schedule the alert

upvoted 0 times

...

Dong

2 months ago

Option B is the way to go. Preview the search results before scheduling the alert? Smart move to make sure it's working as expected.

upvoted 0 times

...

Willis

2 months ago

Hmm, Option D seems a bit more complex than the others. Creating a new custom template and the query? That's a lot of work!

upvoted 0 times

...

Loren

2 months ago

I'd go with Option A. Choosing a pre-defined template and setting up the schedule is a straightforward way to create a custom alert.

upvoted 0 times

...

Ilda

2 months ago

Option C looks good to me. Creating the query, email template, and scheduling the alert seems like the most logical approach.

upvoted 0 times

Angelo

1 months ago

Yeah, it's important to have all those steps in place to ensure the custom alert works effectively.

upvoted 0 times

...

Nan

2 months ago

Creating the query, setting up the email template, and scheduling the alert all in one go makes sense.

upvoted 0 times

...

Alisha

2 months ago

I agree, option C seems like the most straightforward way to create a custom alert rule.

upvoted 0 times

...

Kattie

2 months ago

I'm going with C. Reminds me of that time I tried to program my coffee maker to send me an alert when the pot was empty. Didn't end well.

upvoted 0 times

...

Odelia

2 months ago

A sounds like the easiest option, but I don't think it's the right way to do it. Gotta put in the work to get that custom alert set up properly.

upvoted 0 times

Leota

1 months ago

Definitely, setting up the query and email template first is important for a custom alert rule.

upvoted 0 times

...

Francisca

1 months ago

Yeah, I agree. Option C seems like the right steps to create a custom alert rule.

upvoted 0 times

...

Noe

2 months ago

I think the correct way is to create the query for the alert, setup the email template, and then set the schedule for the alert.

upvoted 0 times

...

Sheldon

2 months ago

A sounds like the easiest option, but I don't think it's the right way to do it. Gotta put in the work to get that custom alert set up properly.

upvoted 0 times

...

Lavonna

2 months ago

Hmm, that makes sense too. I guess we'll have to review the steps carefully.

upvoted 0 times

...

Rocco

2 months ago

D is the answer, for sure. Creating a custom template and then configuring the query and email is the logical approach.

upvoted 0 times

Evangelina

2 months ago

I agree, D seems like the most straightforward way to create a custom alert rule.

upvoted 0 times

...

Rima

2 months ago

I think C might also work. Creating the query first and then setting up the email template and schedule could be efficient.

upvoted 0 times

...

Emmett

2 months ago

D is the answer, for sure. Creating a custom template and then configuring the query and email is the logical approach.

upvoted 0 times

...

Kanisha

3 months ago

I disagree, I believe the answer is B because you need to preview the search results.

upvoted 0 times

...

Lavonna

3 months ago

I think the answer is C because you need to create the query first.

upvoted 0 times

...

Amber

3 months ago

B looks good to me. Previewing the search results before scheduling the alert seems like a smart way to ensure it's set up correctly.

upvoted 0 times

...

Hayley

3 months ago

I think the answer is C. It's the only one that mentions creating the query and email template, which seems to be the key steps in setting up a custom alert.

upvoted 0 times

Zana

1 months ago

Yes, C seems to be the most logical choice for creating a custom alert rule.

upvoted 0 times

...

Renay

1 months ago

I think I'll go with C as well, it makes sense to create the query and set up the email template for the alert.

upvoted 0 times

...

Cristy

2 months ago

I agree, creating the query and setting up the email template are crucial for custom alerts.

upvoted 0 times

...

Adela

2 months ago

I think the answer is C. It's the only one that mentions creating the query and email template, which seems to be the key steps in setting up a custom alert.

upvoted 0 times

...