CCFA-200b 試験問題を無料オンラインアクセス

A host has been Network Contained with Falcon and you have been asked to urgently update the Operating System with patches. You have tried using your patch update systems, but the jobs fail. Which configuration steps in the Falcon UI will allow these activities?

• A.Create a Containment Policy that allow lists the specific IP addresses of your patch management tools
• B.Create an IP group in IP Allowlist Management
• C.Create a Containment Policy that allow lists the FQDN of your patch management tools
• D.Adjust the Content Update Policies to Early Access with No Delay

An inactive host that does not contact the Falcon cloud will be automatically removed from the Host Management and Trash pages after how many days?

• A.60 Days
• B.90 Days
• C.45 Days
• D.75 Days

You need to be aware of which policies are the most used as new hosts are being added to your CID. Where will you find a review of the top-ten sensor update, prevention, and device control policies?

• A.Managed Assets dashboard
• B.Executive Summary
• C.Sensor Policy Daily report

When using Microsoft Windows, what command verifies that a Falcon Sensor is running?

• A.sc.exe query falcon
• B.cswindiag.exe -status
• C.netstat.exe -f
• D.sc.exe query csagent

What log would you use to investigate unusual activity invoked with a script interfacing with the Falcon platform?

• A.Falcon UI audit
• B.RTR session audit
• C.API audit
• D.Prevention policy debug