Scheduling a Custom Alert for your environment consists of three steps: choosing the template you’d like to configure, previewing the search results, then scheduling the alert.
Use Custom Alerts to configure email alerts using predefined templates so you're notified about specific activity in your environment. When an alert runs and finds results, it sends an email to specified recipients instead of generating a new detection.
Custom Alerts let you set up email alerts based on predefined templates that cover a wide range of topics including Real Time Response session initiation, host containment, OS security settings, and more that are not yet covered by notification workflows.
Accesing to custom alerts you will see a list of predefined alert templates configurables in certain aspects but it is not possible to add new event triggers for new alerts, so I think the C answer is the correct.
This section is not available anymore. Please use the main Exam Page.CCFA Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
vsnt89
8 months, 1 week agosbag0024
1 year, 10 months agoCharlesB2
2 years agoFerbOP
2 years agoFerbOP
2 years agoBelrose
2 years, 1 month agoPercy73729
2 years, 2 months ago