exam questions

Exam CCFA All Questions

View all questions & answers for the CCFA exam

Exam CCFA topic 1 question 74 discussion

Actual exam question from CrowdStrike's CCFA
Question #: 74
Topic #: 1
[All CCFA Questions]

Why is the ability to disable detections helpful?

  • A. It gives users the ability to set up hosts to test detections and later remove them from the console
  • B. It gives users the ability to uninstall the sensor from a host
  • C. It gives users the ability to allowlist a false positive detection
  • D. It gives users the ability to remove all data from hosts that have been uninstalled
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
sbag0024
10 months, 3 weeks ago
Selected Answer: A
A is correct, it is in the docs
upvoted 2 times
...
JSN7117
10 months, 3 weeks ago
Selected Answer: A
Based on Documentation
upvoted 1 times
...
Belrose
1 year, 1 month ago
Selected Answer: A
I Agree, the A option is the correct as the documentation tells.
upvoted 2 times
...
testmailuc
1 year, 2 months ago
A is definitely the correct anwser. After checking the documentation i found this "Disable Detections. This is helpful for users who want to set up hosts to test detections in the Falcon console and who later want to remove those old test detections from the"
upvoted 2 times
...
Jek88
1 year, 2 months ago
Selected Answer: C
C is the correct answer.
upvoted 1 times
testmailuc
1 year, 2 months ago
A is definitely the correct anwser. After checking the documentation i found this "Disable Detections. This is helpful for users who want to set up hosts to test detections in the Falcon console and who later want to remove those old test detections from the"
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago