CCFA-200試験無料問題集「CrowdStrike Certified Falcon Administrator 認定」

A. Email address

B. Working groups

C. First or Last name

D. Phone number

A. Activity Overview

B. Hosts Overview

C. Sensor Health

D. Support and resources

A. Add a parallel action to send a custom email to your CISO

B. Add a sequential action to send a custom email to your CISO

C. Add the CISO's email to the existing action

D. Clone the workflow and replace the existing email with your CISO's email

A. The API client secret must be reset or a new client created as the secret cannot be viewed after it has been created

B. Selecting "show secret" within the 3-dot dropdown menu will reveal the secret for the selected api client

C. The API client secret can be provided by support via direct email request from a Falcon Administrator

D. Within the API management page, API client secrets can be accessed within the "edit client" functionality

A. Falcon NGAV is not a replacement for Windows Defender or other antivirus programs

B. Falcon NGAV relies on signature-based detections

C. Activating Falcon NGAV will also enable all detection and prevention settings in the entire policy

D. The Detection sliders cannot be set to a value less aggressive than the Prevention sliders

A. IOA Exclusion

B. Sensor Visibility Exclusion

C. IOC Exclusion

D. Machine Learning Exclusion

A. It only gives a summary of the last logon activity for users

B. It gives a detailed list of all logon activity for users

C. The report can be filtered by computer name

D. Shows a graphical view of user logon activity and the hosts the user connected to

A. In the Investigate module, access the Detection Activity page. Use the filters to focus on the appropriate hostname and time, then export the results

B. Go to Host Management in the Host page. Select the host and use the Export Detections button

C. Utilize the Detection Activity Dashboard. Use the filters to focus on the appropriate hostname and time, then export the results from the "Detections by Host" section

D. Utilize the Detection Resolution Dashboard. Use the filters to focus on the appropriate hostname and time, then export the results from the "Detection Resolution History" section

A. To define allowed IP addresses over which your hosts will communicate when contained

B. To define the duration of Network Containment

C. To define the trigger under which a machine is put in Network Containment (e.g. a critical detection)

D. To define which Falcon analysts can contain endpoints