Question 1

What is the maximum number of patterns that can be added when creating a new exclusion?

Options :

A : 10

B : 0

C : 1

D : 5

Answer: D

Question 2

When the Notify End Users policy setting is turned on, which of the following is TRUE?

Options :

A : End users will not be notified as we would not want to notify a malicious actor of a detection. This setting does not exist

B : End users will be immediately notified via a pop-up that their machine is in-network isolation

C : End-users receive a pop-up notification when a prevention action occurs

D : End users will receive a pop-up allowing them to confirm or refuse a pending quarantine

Answer: C

Question 3

How do you assign a policy to a specific group of hosts?

Options :

A : Create a group containing the desired hosts using 'Static Assignment.' Go to the Assigned Host Groups tab of the desired policy and dick 'Add groups to policy.' Select the desired Group(s).

B : Assign a tag to the desired hosts in Host Management. Create a group with an assignment rule based on that tag. Go to the Assignment tab of the desired policy and click 'Add Groups to Policy.' Select the desired Group(s).

C : Create a group containing the desired hosts using 'Dynamic Assignment.' Go to the Assigned Host Groups tab of the desired policy and select criteria such as OU, OS, Hostname pattern, etc.

D : On the Assignment tab of the desired policy, select 'Static' assignment. From the next window, select the desired hosts (using fitters if needed) and click Add.

Answer: C

Question 4

Which of the following would give you information about inactive sensors within the Falcon console?

Options :

A : Sensor Update Policies

B : Sensor Downloads

C : Sensor Coverage Lookup

D : Sensor Health

Answer: D

Question 5

How can a Falcon Administrator configure a pop-up message to be displayed on a host when the Falcon sensor blocks, kills or quarantines an activity?

Options :

A : By ensuring each user has set the 'pop-ups allowed' in their User Profile configuration page

B : By enabling 'Upload quarantined files' in the General Settings configuration page

C : By turning on the 'Notify End Users' setting at the top of the Prevention policy details configuration page

D : By selecting 'Enable pop-up messages' from the User configuration page

Answer: C

Smartly Prepare Exam with Free Online CCFA-200b Practice Test

Buying Options: