CrowdStrike
CCCS-203B · Question #56
A security administrator needs to edit an existing Falcon Sensor policy to reduce the potential for false positives. What action is required to achieve this?
Sign in or unlock CCCS-203B to reveal the answer and full explanation for question #56. The question stem and answer options stay visible for context.
Sensor Deployment and Management
Question
A security administrator needs to edit an existing Falcon Sensor policy to reduce the potential for false positives. What action is required to achieve this?
Options
- AAdd an exclusion rule for all system processes to prevent unnecessary alerts.
- BDelete the existing policy and recreate it with the updated configuration.
- CLower the sensitivity of "Exploit Detection" to avoid triggering false alerts.
- DMove the policy to the bottom of the policy priority list in the Falcon Console.
Unlock CCCS-203B to see the answer
You've previewed enough free CCCS-203B questions. Unlock CCCS-203B for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Falcon Sensor policy#false positive reduction#exploit detection sensitivity#policy tuning