Question 1

When creating an API client, which of the following must be saved immediately since it cannot be viewed again after the client is created?

Options :

A : Base URL

B : Secret

C : Client ID

D : Client name

Answer: B

Question 2

A sensor that has not contacted the Falcon cloud

will be automatically deleted from the hosts list

after how many days?

Options :

A : 30 Days

B : 45 Days

C : 90 Days

D : 60 Days

Answer: B

Question 3

Which of the following would give you information about inactive sensors within the Falcon console?

Options :

A : Sensor Update Policies

B : Sensor Downloads

C : Sensor Coverage Lookup

D : Sensor Health

Answer: D

Question 4

Which statement is TRUE regarding disabling detections on a host?

Options :

A :

Hosts with detections disabled will not alert on blocklisted hashes or machine learning detections, but will still alert on IOA-based detections. It will remain that way until detections are enabled again

B :

Hosts with detections disabled will not alert on anything for 24 hours (by default) or longer if that setting is changed

C :

Hosts cannot have their detections disabled individually

D :

Hosts with detections disabled will not alert on anything until detections are enabled again

Answer: B

Question 5

You are evaluating the most appropriate Prevention Policy Machine Learning slider settings for your environment. In your testing phase, you configure the Detection slider as Aggressive. After running the sensor with this configuration for 1 week of testing, which Audit report should you review to determine the best Machine Learning slider settings for your organization?

Options :

A : Prevention Policy Audit Trail

B : Prevention Policy Debug

C : Prevention Hashes Ignored

D : Machine-Learning Prevention Monitoring

Answer: A

Higher Test Marks with Free Online CCFA-200b Exam Practice

Buying Options: