Free CrowdStrike CCFA-200 Exam Dumps Questions & Answers

You want to create a detection-only policy. How do you set this up in your policy's settings?

• A.  Select the "Detect-Only" template. Disable hash blocking and exclusions.
• B.  Set the Next-Gen Antivirus detection settings to the desired detection level and all the prevention sliders to disabled. Do not activate any of the other blocking or malware prevention options.
• C.  You can't create a policy that detects but does not prevent. Use Custom IOA rules to detect.
• D.  Enable the detection sliders and disable the prevention sliders. Then ensure that Next Gen Antivirus is enabled so it will disable Windows Defender.

What is likely the reason your Windows host would be in Reduced Functionality Mode (RFM)?

• A.  Microsoft updates altering the kernel
• B.  The host lost internet connectivity
• C.  A Sensor Update Policy was misconfigured
• D.  A misconfiguration in your prevention policy for the host

Which is a filter within the Host setup and management > Host management page?

• A.  User name
• B.  BIOS Version
• C.  OU
• D.  Locality

The Falcon Administrator has created a new prevention policy to apply to the "Servers" group; however, when applying the new prevention policy this group is not appearing in the list of available groups. What is the most likely issue?

• A.  Host type was not defined correctly within the prevention policy
• B.  The new prevention policy should be enabled first
• C.  The "Servers" group already has a policy applied to it
• D.  The "Servers" group must be disabled first

Which of the following scenarios best describes when you would add IP addresses to the containment policy?

• A.  You want to automate the Network Containment process based on the IP address of a host
• B.  Your organization has additional IP addresses that need to be able to access the Falcon console
• C.  Your organization has resources that need to be accessible when hosts are network contained
• D.  A new group of analysts need to be able to place hosts under Network Containment