CCFA-200 試験問題を無料オンラインアクセス

The alignment of a particular prevention policy to one or more host groups can be completed in which of the following locations within Falcon?

• A.Policy alignment is configured in the "Host Management" section in the Hosts application
• B.Policy alignment is configured only once during the initial creation of the policy in the "Create New Policy" pop-up window
• C.Policy alignment is configured in the General Settings section under the Configuration menu
• D.Policy alignment is configured in each policy in the "Assigned Host Groups" tab

You are beginning the rollout of the Falcon Sensor for the first time side-by-side with your existing security solution. You need to configure the Machine Learning levels of the Prevention Policy so it does not interfere with existing solutions during the testing phase. What settings do you choose?

• A.Detection slider: Extra Aggressive
  Prevention slider: Cautious
• B.Detection slider: Cautious
  Prevention slider: Cautious
• C.Detection slider: Moderate
  Prevention slider: Disabled
• D.Detection slider: Disabled
  Prevention slider: Disabled

What is the purpose of the Machine-Learning Prevention Monitoring Report?

• A.It is designed to give an administrator a quick overview of machine-learning aggressiveness settings as well as the numbers of items actually quarantined
• B.It is the dashboard used by an analyst to view all items quarantined and to release any items deemed non-malicious
• C.It is designed to show malware that would have been blocked in your environment based on different Machine-Learning Prevention settings
• D.It is the dashboard used to see machine-learning preventions, and it is used to identify spikes in activity and possible targeted attacks

Which of the following roles allows a Falcon user to create Real Time Response Custom Scripts?

• A.Real Time Responder - Read Only Analyst
• B.Real Time Responder - Active Responder
• C.Real Time Responder - Script Developer
• D.Real Time Responder - Administrator

Which report lists counts of sensors in Reduced Functionality Mode (RFM) for all operating system types, and tracks how long a sensor version will be supported?

• A.Sensor Health Report
• B.Inactive Sensor Report
• C.Sensor Coverage Lookup
• D.Reduce Functionality Audit Report