You are tasked with creating a scheduled report for Indicators of Attack (IOAs) and Indicators of Maliciousness (IOMs) in the CrowdStrike platform. Which step is crucial to ensure the report…

Question

Options

• ASet the report frequency to once a year for minimal operational impact.
• BShare the report exclusively with the executive team.
• CConfigure filters to exclude benign detections and focus on high-severity threats.
• DInclude only IOAs in the report to minimize data volume.

• A
  15% (7)
• B
  4% (2)
• C
  75% (36)
• D
  6% (3)

Explanation

Option A: An annual report frequency is insufficient for real-time threat mitigation. Security teams require more frequent updates, such as daily or weekly, to respond effectively to emerging Option B: While executives need summaries, sharing reports exclusively with them prevents the security team from accessing actionable insights necessary for day-to-day threat response. Option C: Configuring filters ensures that the report highlights relevant and actionable threats. Excluding benign detections reduces noise and allows the security team to focus on critical IOAs and IOMs, improving response efficiency. Mismanaging filters can overwhelm the team with unnecessary data or omit key threats. Option D: Limiting the report to IOAs ignores IOMs, which are critical for understanding malicious patterns. Both indicators are essential for a comprehensive threat landscape view.

No community discussion yet for this question.