Câu 2: CCFA: CrowdStrike Certified Falcon Administrator

What is the purpose of a containment policy?

1. A. To define which Falcon analysts can contain endpoints
2. B. To define the duration of Network Containment
3. C. To define the trigger under which a machine is put in Network Containment (e.g. a critical detection)
4. D. To define allowed IP addresses over which your hosts will communicate when contained — đáp án hiện tại