exam questions

Exam CCFA All Questions

View all questions & answers for the CCFA exam

Exam CCFA topic 1 question 111 discussion

Actual exam question from CrowdStrike's CCFA
Question #: 111
Topic #: 1
[All CCFA Questions]

After Network Containing a host, your Incident Response team states they are unable to remotely connect to the host. Which of the following would need to be configured to allow remote connections from specified IP's?

  • A. Response Policy
  • B. IP Allowlist Management
  • C. Maintenance Token
  • D. Containment Policy
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
blahman34
2 weeks, 3 days ago
Selected Answer: D
Allowed IPs are configured within a Network Containment Policy
upvoted 2 times
...
nickla1974
3 weeks, 4 days ago
D is correct. Seems to be network related issue.
upvoted 2 times
...
FerbOP
5 months, 1 week ago
Selected Answer: D
D is correct
upvoted 2 times
...
Brian9296
7 months, 1 week ago
Selected Answer: D
Should be D
upvoted 3 times
...
Stake
7 months, 2 weeks ago
D correct. This issue is about network containing host.
upvoted 3 times
...
001truth
7 months, 2 weeks ago
This should be B.By default, user access is not limited by IP address. You can configure the IP allowlist to restrict access to specific IP addresses and help ensure your account is only accessed from specific networks. When a user attempts to sign in through the Falcon console or the CrowdStrike API, their IP address is evaluated against the allowlist. Access from unlisted IP addresses is denied.
upvoted 1 times
001truth
7 months, 2 weeks ago
I am sorry it should be D. I have explained what IP allowlist management.
upvoted 2 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago