Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
Mail Us[email protected]
Menu
Crowdstrike Discussions
exam questions

Exam CCFR-201 All Questions

View all questions & answers for the CCFR-201 exam
Go to Exam

Exam CCFR-201 topic 1 question 60 discussion

Actual exam question from CrowdStrike's CCFR-201
Question #: 60
Topic #: 1
[All CCFR-201 Questions]

Which option indicates a hash is allowlisted?

  • A. No Action
  • B. Allow
  • C. Ignore
  • D. Always Block
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
by lightmagenta at Dec. 13, 2023, 7:03 a.m.

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Submit Cancel
alanalanalan
6 months ago
Selected Answer: B
Answer is B, Allow Checked the IOC management UI, the "action" only have four types : Block, Detect Only, Allow and Block + hide detection.
upvoted 1 times
...
silva222222
6 months, 1 week ago
Selected Answer: B
The option that indicates a hash is allowlisted is: B. Allow When a hash is allowlisted, it means that it is explicitly permitted and allowed to run or perform its intended actions on the system. Therefore, selecting "Allow" indicates that the hash is included in the allowlist.
upvoted 1 times
...
kangaru
9 months, 2 weeks ago
Selected Answer: B
Use allow to add hash to allowlist. IoC Management only supports allowlisting in Hash. To apply for IP and Domains, use IoA Rules.
upvoted 1 times
...
sbag0024
9 months, 3 weeks ago
Selected Answer: A
The correct answer is A. No Action, Never block, Always Block, and Remove Hashes are the only options.
upvoted 1 times
...
wildbandana
11 months, 1 week ago
Selected Answer: B
checked in docs
upvoted 1 times
sbag0024
9 months, 3 weeks ago
wrong you did not check at all bc no where in the UI is an "allow" an option
upvoted 1 times
kangaru
9 months, 2 weeks ago
This time he's right lol. There is 'allow' in IoC Hash
upvoted 1 times
...
...
...
wildbandana
11 months, 1 week ago
B checked in docs
upvoted 1 times
sbag0024
9 months, 3 weeks ago
WRONG! GTFO
upvoted 1 times
...
...

Get IT Certification

Unlock free, top-quality video courses on ExamTopics with a simple registration. Elevate your learning journey with our expertly curated content. Register now to access a diverse range of educational resources designed for your success. Start learning today with ExamTopics!

Start Learning for free
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel