Instant Download CCFA-200b Dumps Q&As Provide PDF&Test Engine [Q35-Q56]

NO.35 Why would you add IP addresses to a containment policy?

NO.36 What is the primary purpose of using glob syntax in an exclusion?

NO.37 The alignment of a particular prevention policy to one or more host groups can be completed in which of the following locations within Falcon?

NO.38 Which report provides a filterable high-level overview of host information such as OS version, Device Type and Machine Domain, and also provides an active sensor heat map for a quick environment review?

NO.39 When would the No Action option be assigned to a hash in IOC Management?

NO.40 Which report in Falcon can be used to determine the volume of blocked activity at a different prevention policy setting?

NO.41 When an API client is created, what two pieces of information must be generated as a pair to successfully identify and validate your API integrations?

NO.42 What are the two triggers that cause a fusion workflow to run?

NO.43 Where should you look to find the history of the successes and failures for any Falcon Fusion workflows?

NO.44 What is the primary purpose of audit logs in Falcon?

NO.45 What happens to detections in the console after clicking “Disable Detections” for a host from within the Host Management page?

NO.46 When a Linux host is in Reduced Functionality Mode (RFM) what telemetry and protection is still offered?

NO.47 You are creating a new host group that needs to contain all of the servers in your environment regardless of the installed operating system.
Which filter should be applied to the group’s assignment rule to accomplish this task?

NO.48 You are attempting to install the Falcon sensor on a host with a slow internet connection, and the installation fails after 20 minutes. What parameter can be used to override the 20-minute default provisioning window?

NO.49 The Falcon sensor uses certificate pinning to defend against man-in-the-middle attacks. Which statement is TRUE concerning Falcon sensor certificate validation?

NO.50 How can you search for multiple hostnames at the same time via Host Management?

NO.51 What will happen to a host that is not part of any group which has a prevention policy assigned to it?

NO.52 What least privilege role should be given to a user who needs to extract files with RTR?

NO.53 An inactive host that does not contact the Falcon cloud will be automatically removed from the Host Management and Trash pages after how many days?

NO.54 You have 100 hashes that have been prohibited by management and need to be blocked within your organization. Using Falcon, what is the best way to accomplish this?

NO.55 Which of the following can a Falcon Administrator edit in an existing user’s profile?

NO.56 When configuring a third-party integration to communicate with the Falcon API, which credential combination must be generated first?