Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.

Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.

Exam CCFR-201 topic 1 question 48 discussion

Actual exam question from CrowdStrike's CCFR-201
Question #: 48
Topic #: 1
[All CCFR-201 Questions]

What happens when a hash is set to Always Block through IOC Management?

  • A. Execution is prevented on all hosts by default
  • B. Execution is prevented on selected host groups
  • C. Execution is prevented and detection alerts are suppressed
  • D. The hash is submitted for approval to be blocked from execution once confirmed by Falcon specialists
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
kangaru
2 months, 2 weeks ago
Selected Answer: B
You have options to choose whether to apply IoC rule to All hosts or Specific Host Groups.
upvoted 1 times
...
sbag0024
2 months, 4 weeks ago
Selected Answer: B
B is the correct answer. It is by selected host groups
upvoted 1 times
...
aaron757
4 months ago
I believe the answer is B. "All hosts" is NOT selected by default, but is an available option.
upvoted 1 times
...
wildbandana
4 months, 2 weeks ago
Selected Answer: A
pay attention to proposed answer
upvoted 1 times
sbag0024
2 months, 4 weeks ago
I feel like you are someone who works for other sites that want people to fail and pay for another practice exam on your site. That or this is an inside job which should have a legal action taken.
upvoted 7 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...