CCFA-200b 무료 덤프문제 온라인 액세스

What type of information is provided in sensor health report?

• A.Local performance metrics
• B.Network traffic patterns
• C.User login history
• D.Current operational status

To test a new Falcon sensor version, you have created a new sensor update policy and two separate dynamic host groups. One group contains all test Windows servers. The other group contains all of your Windows servers. The new policy was applied to only the test Windows servers host group. What is required to safely and successfully test your new sensor update policy on only your test Windows servers?

• A.The new policy must be enabled and assigned a precedence that is lower when compared to the policy assigned to all Windows servers
• B.The new Falcon sensor version should be manually uninstalled by you on every test Windows server before ever enabling and assigning the new policy
• C.The new policy must be enabled and assigned a precedence that is higher when compared to the policy assigned to all Windows servers
• D.The new Falcon sensor version should be manually installed by you on every test Windows server before ever enabling and assigning the new policy

When would the No Action option be assigned to a hash in IOC Management?

• A.There is no such option as No Action available in the Falcon console
• B.When you want to add the indicator to your blocklist and show it as a detection
• C.When you want to save the indicator for later action, but do not want to block or allow it at this time
• D.When you want to add the indicator to your allowlist, but not detect it

Which ML exclusion pattern would be the most accurate for all .exe binaries in "C:\Program Files\Software\", including any subfolders of Software?

• A.Program Files\Software*.exe
• B.Program Files\Software* *.exe
• C.***.exe
• D.Program Files\Software* .exe

To improve the organization's security posture, you are designing a Fusion SOAR workflow to generate an alert when critical vulnerabilities are detected by Falcon. When creating a new workflow from scratch, what component of the workflow must be configured first?

• A.Action
• B.Workflow Name
• C.Condition
• D.Trigger