Question 1

Which role is required to manage groups and policies in Falcon?

Options :

A : Falcon Host Analyst

B : Falcon Host Administrator

C : Prevention Hashes Manager

D : Falcon Host Security Lead

Answer: B

Question 2

When the Notify End Users policy setting is turned on, which of the following is TRUE?

Options :

A : End users will not be notified as we would not want to notify a malicious actor of a detection. This setting does not exist

B : End users will be immediately notified via a pop-up that their machine is in-network isolation

C : End-users receive a pop-up notification when a prevention action occurs

D : End users will receive a pop-up allowing them to confirm or refuse a pending quarantine

Answer: C

Question 3

Which of the following uses Regex to create a detection or take a preventative action?

Options :

A : Machine Learning Exclusion

B : Custom IOA

C : Sensor Visibility Exclusion

D : Custom IOC

Answer: B

Question 4

You have a Windows host on your network in

Reduced functionality mode (RFM). While the

system is in RFM, which of the following is TRUE?

Options :

A : Event reporting will be unavailable

B : System monitoring will be unavailable

C : Prevention patterns will not be triggered

D : Some detection patterns and preventions

will not be triggered

Answer: D

Question 5

Where can you modify settings to permit certain traffic during a containment period?

Options :

A : Prevention Policy

B : Host Settings

C : Containment Policy

D : Firewall Settings

Answer: C