Which statement is TRUE regarding disabling detections on a host?
A.
Hosts with detections disabled will not alert on anything for 24 hours (by default) or longer if that setting is changed
B.
Hosts with detections disabled will not alert on anything until detections are enabled again
C.
Hosts with detections disabled will not alert on blocklisted hashes or machine learning detections, but will still alert on IOA-based detections. It will remain that way until detections are enabled again
D.
Hosts cannot have their detections disabled individually
This section is not available anymore. Please use the main Exam Page.CCFA Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Itspecialistj
4 months ago