CCFA-200b 무료 덤프문제 온라인 액세스

Why would you add IP addresses to a containment policy?

• A.You want to automate the Network Containment process based on the IP address of a host
• B.Your organization has additional IP addresses that need to be able to access the Falcon console
• C.Your organization has resources that need to be accessible when hosts are network contained
• D.A new group of analysts need to be able to place hosts under Network Containment

How do you enable Falcon to quarantine files?

• A.Through system restore
• B.Through manual file deletion
• C.Through Prevention policy settings
• D.Through General Settings

You want to add an additional layer of security to high-risk Real Time Response commands for your environment. Where do you configure MFA for RTR within the UI?

• A.Notifications
• B.General settings
• C.Response policies
• D.Containment policy

You need to be aware of which policies are the most used as new hosts are being added to your CID. Where will you find a review of the top-ten sensor update, prevention, and device control policies?

• A.Managed Assets dashboard
• B.Executive Summary
• C.Sensor Policy Daily report

Which report provides a filterable high-level overview of host information such as OS version, Device Type and Machine Domain, and also provides an active sensor heat map for a quick environment review?

• A.Sensor Policy Daily Report
• B.Sensor Report
• C.Sensor Overview Report
• D.Sensor Status Report