Which of the following is an example of automated remediation within CrowdStrike's cloud security ecosystem?

The correct answer is C. Automatically isolating a virtual machine upon detecting malware. Option A: Manual actions do not qualify as automated remediation. Automated remediation would involve dynamic blocking without manual intervention. Option B: While useful for insights, this is a reporting function and not an automated remediation action. Automated remediation…

Incident Response and Automated Remediation

Question

Options

AManually updating firewall rules to block known malicious IPs.
BGenerating a weekly summary of security incidents for analysis.
CAutomatically isolating a virtual machine upon detecting malware.
DSending a notification email to administrators after a detection.

How the community answered

(31 responses)

A
3% (1)
C
94% (29)
D
3% (1)

Explanation

Option A: Manual actions do not qualify as automated remediation. Automated remediation would involve dynamic blocking without manual intervention. Option B: While useful for insights, this is a reporting function and not an automated remediation action. Automated remediation focuses on immediate response to incidents. Option C: Automated remediation involves taking immediate action, such as isolating a compromised virtual machine, based on predefined triggers. This minimizes the risk of further spread or damage. Option D: Sending notifications is an alerting function, not remediation. Remediation involves actions that directly address and mitigate the threat.

Topics

#automated remediation#VM isolation#threat response#CrowdStrike automation

Community Discussion

No community discussion yet for this question.

Full CCCS-203B Practice