ExamTopics Logo
Mail Us[email protected]
Menu
Crowdstrike Discussions
exam questions

Exam CCFA All Questions

View all questions & answers for the CCFA exam
Go to Exam

Exam CCFA topic 1 question 70 discussion

Actual exam question from CrowdStrike's CCFA
Question #: 70
Topic #: 1
[All CCFA Questions]

Once an exclusion is saved, what can be edited in the future?

  • A. All parts of the exclusion can be changed
  • B. Only the selected groups and hosts to which the exclusion is applied can be changed
  • C. Only the options to "Detect/Block" and/or "File Extraction" can be changed
  • D. The exclusion pattern cannot be changed
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
by Roy_So at Feb. 2, 2023, 7:14 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
sbag0024
11 months ago
Selected Answer: A
Tested this in the UI A is correct
upvoted 1 times
...
sbag0024
11 months, 1 week ago
What type of Exclusions? ML is only Hosts, IOA is everything. This could be A or B
upvoted 1 times
...
FerbOP
1 year ago
Selected Answer: A
A is correct
upvoted 2 times
...
testmailuc
1 year, 2 months ago
Selected Answer: A
A correct. First step groups and second everythig else about SVE, and ML. About IOA already dal first step you can change everything. So you can vhange everything for every exclusion.
upvoted 2 times
...
Prr0
1 year, 2 months ago
A is correct, checked in Falcon
upvoted 2 times
...
Roy_So
1 year, 3 months ago
B is incorrect. the exclusion is based on the group, it needs to set the group first.
upvoted 2 times
testmailuc
1 year, 2 months ago
A correct. First step groups and second everythig else about SVE, and ML. About IOA already dal first step you can change everything. So you can vhange everything for every exclusion.
upvoted 1 times
...
...
Roy_So
1 year, 3 months ago
Selected Answer: A
A is correct.
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago