How do you assign a policy to a specific group of hosts?

• A.Create a group containing the desired hosts using "Static Assignment." Go to the Assigned Host Groups tab of the desired policy and dick "Add groups to policy." Select the desired Group(s).
• B.Assign a tag to the desired hosts in Host Management. Create a group with an assignment rule based on that tag. Go to the Assignment tab of the desired policy and click "Add Groups to Policy." Select the desired Group(s).
• C.On the Assignment tab of the desired policy, select "Static" assignment. From the next window, select the desired hosts (using fitters if needed) and click Add.
• D.Create a group containing the desired hosts using "Dynamic Assignment." Go to the Assigned Host Groups tab of the desired policy and select criteria such as OU, OS, Hostname pattern, etc.

Comment: *

Name: *

Email: *

Verification: *

What are custom alerts based on?

• A.User defined Splunk queries
• B.Custom workflows
• C.Predefined alert templates
• D.Custom event based triggers

Comment: *

Name: *

Email: *

Verification: *

Your organization has a set of servers that are not allowed to be accessed remotely, including via Real Time Response (RTR). You already have these servers in their own Falcon host group. What is the next step to disable RTR only on these hosts?

• A.Edit the Default Response Policy, toggle the "Real Time Response" switch off and assign the policy to the host group
• B.Edit the Default Response Policy and add the host group to the exceptions list under "Real Time Functionality"
• C.Create a new Response Policy, toggle the "Real Time Response" switch off and assign the policy to the host group
• D.Create a new Response Policy and add the host name to the exceptions list under "Real Time Functionality"

Comment: *

Name: *

Email: *

Verification: *

With Custom Alerts, it is possible to __________.

• A.schedule the alert to run at any interval
• B.be alerted to activity in real-time
• C.receive an alert in an email
• D.configure prevention actions for alerting

Comment: *

Name: *

Email: *

Verification: *

Which of the following is a valid step when troubleshooting sensor installation failure?

• A.Disable SSL and TLS on the host
• B.Confirm all required services are running on the system
• C.Enable the Windows firewall
• D.Delete any available application crash log files

Comment: *

Name: *

Email: *

Verification: *