What impact does disabling detections on a host have on an API?

• A.Endpoints cannot have their detections disabled individually
• B.DetectionSummaryEvent stops sending to the Streaming API for that host
• C.Endpoints with detections disabled will not alert on anything until detections are enabled again
• D.Endpoints with detections disabled will not alert on anything for 24 hours (by default) or longer if that setting is changed

Comment: *

Name: *

Email: *

Verification: *

How can you find a list of hosts that have not communicated with the CrowdStrike Cloud in the last 30 days?

• A.Under Host setup and management, choose the Disabled Sensors Report. Change the time range to 30 days
• B.Under Host setup and management, choose the Host Management page. Set the group filter to "Inactive Sensors"
• C.Under Host setup and management > Managed endpoints > Inactive Sensors. Change the time range to 30 days
• D.Under Dashboards and reports, choose the Sensor Report. Set the "Last Seen" dropdown to 30 days and reference the Inactive Sensors widget

Comment: *

Name: *

Email: *

Verification: *

You need to export a list of all deletions for a specific Host Name in the last 24 hours. What is the best way to do this?

• A.Utilize the Detection Activity Dashboard. Use the filters to focus on the appropriate hostname and time, then export the results from the "Detections by Host" section
• B.In the Investigate module, access the Detection Activity page. Use the filters to focus on the appropriate hostname and time, then export the results
• C.Utilize the Detection Resolution Dashboard. Use the filters to focus on the appropriate hostname and time, then export the results from the "Detection Resolution History" section
• D.Go to Host Management in the Host page. Select the host and use the Export Detections button

Comment: *

Name: *

Email: *

Verification: *

The alignment of a particular prevention policy to one or more host groups can be completed in which of the following locations within Falcon?

• A.Policy alignment is configured in the "Host Management" section in the Hosts application
• B.Policy alignment is configured only once during the initial creation of the policy in the "Create New Policy" pop-up window
• C.Policy alignment is configured in the General Settings section under the Configuration menu
• D.Policy alignment is configured in each policy in the "Assigned Host Groups" tab

Comment: *

Name: *

Email: *

Verification: *

What is the purpose of a containment policy?

• A.To define which Falcon analysts can contain endpoints
• B.To define the duration of Network Containment
• C.To define the trigger under which a machine is put in Network Containment (e.g. a critical detection)
• D.To define allowed IP addresses over which your hosts will communicate when contained

Comment: *

Name: *

Email: *

Verification: *