CCFA-200b 무료 덤프문제 온라인 액세스

Which of the following scenarios best describes when you would add IP addresses to the containment policy?

• A.Your organization has resources that need to be accessible when hosts are network contained
• B.Your organization has additional IP addresses that need to be able to access the Falcon console
• C.A new group of analysts need to be able to place hosts under Network Containment
• D.You want to automate the Network Containment process based on the IP address of a host

You are the Falcon Administrator for your organization, and you want to ensure you have accountability for the actions your Falcon users take.
What is the retention period of the audit logs within Falcon?

• A.90 days
• B.30 days
• C.180 days
• D.One year

What are custom alerts based on?

• A.Custom workflows
• B.Predefined alert templates
• C.User defined Splunk queries
• D.Custom event based triggers

Which report provides a filterable high-level overview of host information such as OS version, Device Type and Machine Domain, and also provides an active sensor heat map for a quick environment review?

• A.Sensor Report
• B.Sensor Overview Report
• C.Sensor Policy Daily Report
• D.Sensor Status Report

You are creating a new host group that needs to contain all of the servers in your environment regardless of the installed operating system.
Which filter should be applied to the group's assignment rule to accomplish this task?

• A.Build - Server
• B.Model - Server
• C.Manufacturer-All
• D.Type - Server