Câu 29: CCFA: CrowdStrike Certified Falcon Administrator

You want to create a detection-only policy. How do you set this up in your policy's settings?

1. A. Enable the detection sliders and disable the prevention sliders. Then ensure that Next Gen Antivirus is enabled so it will disable Windows Defender.
2. B. Select the "Detect-Only" template. Disable hash blocking and exclusions.
3. C. You can't create a policy that detects but does not prevent. Use Custom IOA rules to detect.
4. D. Set the Next-Gen Antivirus detection settings to the desired detection level and all the prevention sliders to disabled. Do not activate any of the other blocking or malware prevention options. — đáp án hiện tại