Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
exam questions

Exam CCFR-201 All Questions

View all questions & answers for the CCFR-201 exam

Exam CCFR-201 topic 1 question 48 discussion

Actual exam question from CrowdStrike's CCFR-201
Question #: 48
Topic #: 1
[All CCFR-201 Questions]

What happens when a hash is set to Always Block through IOC Management?

  • A. Execution is prevented on all hosts by default
  • B. Execution is prevented on selected host groups
  • C. Execution is prevented and detection alerts are suppressed
  • D. The hash is submitted for approval to be blocked from execution once confirmed by Falcon specialists
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
alanalanalan
6 months ago
Selected Answer: B
Answer is B , B. Execution is prevented on selected host groups Falcon policy is using "group" concept to control
upvoted 1 times
...
kangaru
9 months, 2 weeks ago
Selected Answer: B
You have options to choose whether to apply IoC rule to All hosts or Specific Host Groups.
upvoted 1 times
...
sbag0024
9 months, 3 weeks ago
Selected Answer: B
B is the correct answer. It is by selected host groups
upvoted 1 times
...
aaron757
11 months ago
I believe the answer is B. "All hosts" is NOT selected by default, but is an available option.
upvoted 1 times
...
wildbandana
11 months, 2 weeks ago
Selected Answer: A
pay attention to proposed answer
upvoted 1 times
sbag0024
9 months, 3 weeks ago
I feel like you are someone who works for other sites that want people to fail and pay for another practice exam on your site. That or this is an inside job which should have a legal action taken.
upvoted 8 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...