Câu 19: CCFA-200B: CrowdStrike Certified Falcon Administrator
Detections related to a penetration test on a particular server are currently generating thousands of entries in the console. Your leadership does not need to track the detections in Falcon. What should you do to allow your team to focus on more relevant detections?
Nội dung câu hỏi
Detections related to a penetration test on a particular server are currently generating thousands of entries in the console. Your leadership does not need to track the detections in Falcon. What should you do to allow your team to focus on more relevant detections?
Các lựa chọn
Đáp án được giữ gọn theo nhãn A, B, C, D trong phần bình chọn tương tác.
- A. Delete the detections in the console and contain the server undergoing the test
- B. Temporarily disable detections for the server in Host Management and reenable after the test is done — đáp án hiện tại
- C. Create a Fusion Workflow to email the SOC team every time the penetration test generates a detection
- D. Permanently disable detections for the server in Host Management
Cộng đồng
0 bình luận công khai. Tên thành viên được ẩn một phần.
Chưa có bình luận. Mở giao diện tương tác để bắt đầu thảo luận.