Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
Mail Us[email protected]
Menu
Crowdstrike Discussions
exam questions

Exam CCFA All Questions

View all questions & answers for the CCFA exam
Go to Exam

Exam CCFA topic 1 question 157 discussion

Actual exam question from CrowdStrike's CCFA
Question #: 157
Topic #: 1
[All CCFA Questions]

What will happen to a host that is not part of any group which has a prevention policy assigned to it?

  • A. The host will apply the default prevention policy
  • B. The host will apply a sensor-based policy to prevent a majority of known threats
  • C. The host will send a notification to the Falcon Administrator to assign a prevention policy
  • D. The host will disable the falcon sensor
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
by SeverOwl91 at April 23, 2024, 12:21 p.m.

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Submit Cancel
nickla1974
5 months, 3 weeks ago
correct is A. the Default is a catch all policy
upvoted 1 times
...
SeverOwl91
7 months ago
Selected Answer: A
Documentation: Endpoint Security > Configuration > Detection and Prevention Policies > Title: Policy Precedence > para 4 If a host is not a part of any groups, or the groups it belongs to has no policies assigned, it is automatically assigned to the default policy.
upvoted 1 times
...

Get IT Certification

Unlock free, top-quality video courses on ExamTopics with a simple registration. Elevate your learning journey with our expertly curated content. Register now to access a diverse range of educational resources designed for your success. Start learning today with ExamTopics!

Start Learning for free
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel