You want to create a detection-only policy. How do you set this up in your policy's settings?
Answer(s): D
Which of the following is an effective Custom IOA rule pattern to kill any process attempting to access www.badguydomain.com?
Answer(s): B
Where can you modify settings to permit certain traffic during a containment period?
Answer(s): C
Which option allows you to exclude behavioral detections from the detections page?
Answer(s): A
What are custom alerts based on?
Post your Comments and Discuss CrowdStrike CCFA exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CCFA content, but please register or login to continue.