exam questions

Exam CCFA All Questions

View all questions & answers for the CCFA exam

Exam CCFA topic 1 question 210 discussion

Actual exam question from CrowdStrike's CCFA
Question #: 210
Topic #: 1
[All CCFA Questions]

What happens to detections in the console after clicking “Disable Detections" for a host from within the Host Management page?

  • A. Detections from the host are paused for 7 days. Existing detections from the host are removed from the console within 24 hours.
  • B. The detections for the host are removed from the console immediately. No new detections will display in the console going forward.
  • C. Existing detections for the host remain. No new detections will display in the console going forward.
  • D. Existing detections for the host are removed from the console. The process that triggered them is allow-listed to prevent future alerts. Detections for other alerts are unaffected.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
alashi
1 month ago
Selected Answer: B
Detections will be removed, and only restored if detections are re-enabled again
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...