Free CrowdStrike CCFA-200b Exam Dumps Questions & Answers

In order to receive the most stable sensor updates, what level of automatic sensor updates should be applied to a host?

• A.  Auto-N-2
• B.  Auto-N-1
• C.  Pinned sensor version
• D.  Auto-Latest

After enabling an IOA rule and its respective rule group, what else must be done for an IOA to be fully functional?

• A.  Hosts must be individually selected to apply to the rule
• B.  The rule group must be assigned to a prevention policy
• C.  The rule must be manually triggered

What happens to detections in the console after clicking "Disable Detections" for a host from within the Host Management page?

• A.  The detections for the host are removed from the console immediately
• B.  New detections are disabled for 30 days
• C.  All detection data for the host is deleted and the host is hidden from view
• D.  Existing detections for the host remain

What are the two automated triggers that cause a Fusion SOAR workflow to run?

• A.  Incident and detections triggers
• B.  Event and action triggers
• C.  Condition and action triggers
• D.  Event and scheduled triggers

What is the primary purpose of custom IOA rules?

• A.  Block known malware
• B.  Identify malicious behavior
• C.  Manage system updates
• D.  Configure network settings