ExamTopics Logo
Mail Us[email protected]
Menu
Crowdstrike Discussions
exam questions

Exam CCFA All Questions

View all questions & answers for the CCFA exam
Go to Exam

Exam CCFA topic 1 question 83 discussion

Actual exam question from CrowdStrike's CCFA
Question #: 83
Topic #: 1
[All CCFA Questions]

You are beginning the rollout of the Falcon Sensor for the first time side-by-side with your existing security solution. You need to configure the Machine Learning levels of the Prevention Policy so it does not interfere with existing solutions during the testing phase. What settings do you choose?

  • A. • Detection slider: Extra Aggressive
    • Prevention slider: Cautious
  • B. • Detection slider: Moderate
    • Prevention slider: Disabled
  • C. • Detection slider: Cautious
    • Prevention slider: Cautious
  • D. • Detection slider: Disabled
    • Prevention slider: Disabled
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
by VJJijo at Feb. 3, 2023, 11:46 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
VJJijo
Highly Voted 1 year, 2 months ago
B is correct
upvoted 5 times
...
sbag0024
Most Recent 10 months, 2 weeks ago
Selected Answer: B
B is correct, checked the Doc, Phase 1 is Mod/disabled.
upvoted 1 times
...
FerbOP
12 months ago
Selected Answer: B
B is correct
upvoted 2 times
...
Belrose
1 year, 1 month ago
Selected Answer: B
Right B is correct, if you activate protection in any level it can interfere with the other AV solution in the moment of protecting against the detected threat.
upvoted 2 times
...
Prr0
1 year, 1 month ago
B is correct, prevention must be disable to not interfere with other solution
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago