Which of the following is a correct example of using automated remediation in the CrowdStrike Falcon platform to address a cloud-related security incident?

Question

Options

• ADisabling unused user accounts in the cloud environment weekly
• BSending compliance violation logs to a third-party monitoring system
• CQuarantining a compromised virtual machine automatically upon detection of malware
• DNotifying an administrator to review suspicious activity manually

• A
  6% (3)
• B
  2% (1)
• C
  90% (45)
• D
  2% (1)

Explanation

Option A: This action is an example of a maintenance task, not automated remediation. Automated remediation focuses on dynamic responses to detected threats or incidents rather than routine administrative tasks. Option B: This action is part of logging and monitoring, not remediation. Automated remediation involves direct actions to mitigate or eliminate threats rather than just reporting or logging Option C: Automated remediation in the CrowdStrike Falcon platform includes the ability to isolate or quarantine compromised resources, such as virtual machines, to prevent further spread of malware or threats. This action happens automatically based on predefined policies and is a hallmark of automated remediation. It ensures immediate containment without waiting for manual Option D: While notification is an essential part of incident response, it is not an example of automated remediation. Automated remediation involves taking direct action, such as isolating or removing a threat, rather than relying on manual review or follow-up.

No community discussion yet for this question.