Custom IOA rules are defined using which syntax?
Correct Answer: D
Regex guidelines https://falcon.crowdstrike.com/documentation/68/detection-and-prevention-policies#regex
A sensor that has not contacted the Falcon cloud will be automatically deleted from the hosts list after how many days?
Correct Answer: D
A sensor that has not contacted the Falcon cloud will be automatically deleted from the hosts list after 90 days. A sensor that has not contacted the Falcon cloud for more than seven days is considered inactive and will be moved from the Host Management page to the Trash page. An inactive sensor will remain in the Trash page for 90 days before being permanently deleted from the Falcon platform. You can restore an inactive sensor from the Trash page if it contacts the Falcon cloud again within 90 days.
Which of the following applies to Custom Blocking Prevention Policy settings?
Correct Answer: A
Falcon allows you to upload hashes from your own black or white lists. To enabled this navigate to the Configuration App, Prevention hashes window, and click on ”Upload Hashes” in the upper right-hand corner. Note that you can also automate the task of importing hashes with the CrowdStrike Falcon API.
https://www.crowdstrike.com/blog/tech-center/how-to-prevent-malware-with-custom-blacklisting/
Which of the following controls the speed in which your sensors will receive automatic sensor updates?
Correct Answer: C
The option that controls the speed in which your sensors will receive automatic sensor updates is Sensor Update Throttling. Sensor Update Throttling allows you to limit the number of sensors that can download a new sensor version per hour. This way, you can avoid network congestion or bandwidth issues caused by simultaneous sensor updates.You can configure the Sensor Update Throttling setting in the Sensor Update Policy for each platform1.
What is the function of a single asterisk (*) in an ML exclusion pattern?
Correct Answer: B
The asterisk is a wildcard character that can be used in exclusion patterns to match any number of characters. However, it does not match separator characters, such as \ or /, which are used to separate portions of a file path. For example, the patternC:\Windows\*\*.exewill match any executable file in any subfolder of the Windows folder, but not in the Windows folder itself.
Prep2Certsis a premium service offering a comprehensive collection of exam questions and answers for over 1400 certification exams. It is regularly updated and designed to help users pass their certification exams confidently.
Please contact info@Prep2Certs.com and we will provide you with alternative payment options.
You can by Contacting our sales team.