On the Host management page which filter could be used to quickly identify all devices categorized as a
"Workstation" by the Falcon Platform?

• A.Status
• B.Platform
• C.Hostname
• D.Type

Comment: *

Name: *

Email: *

Verification: *

Which is the correct order for manually installing a Falcon Package on a macOS system?

• A.Install the Falcon package, then register the Falcon Sensor via the registration package
• B.Install the Falcon package, then register the Falcon Sensor via command line
• C.Register the Falcon Sensor via command line, then install the Falcon package
• D.Register the Falcon Sensor via the registration package, then install the Falcon package

Comment: *

Name: *

Email: *

Verification: *

You have determined that you have numerous Machine Learning detections in your environment that are false positives. They are caused by a single binary that was custom written by a vendor for you and that binary is running on many endpoints. What is the best way to prevent these in the future?

• A.Using IOC Management, add the hash of the binary in question and set the action to "Allow"
• B.Using IOC Management, add the hash of the binary in question and set the action to "No Action"
• C.Using IOC Management, add the hash of the binary in question and set the action to "Block, hide detection"
• D.Contact support and request that they modify the Machine Learning settings to no longer include this detection

Comment: *

Name: *

Email: *

Verification: *

How do you find a list of inactive sensors?

• A.Run the Inactive Sensor Report in the Host setup and management option
• B.Run the Sensor Aging Report within the Investigate option
• C.A sensor is always considered active until removed by an Administrator
• D.The Falcon platform does not provide reporting for inactive sensors

Comment: *

Name: *

Email: *

Verification: *

Even though you are a Falcon Administrator, you discover you are unable to use the "Connect to Host" feature to gather additional information which is only available on the host. Which role do you need added to your user account to have this capability?

• A.Real Time Responder
• B.Endpoint Manager
• C.Falcon Investigator
• D.Remediation Manager

Comment: *

Name: *

Email: *

Verification: *