What is the purpose of a containment policy?

The correct answer is D. To define allowed IP addresses over which your hosts will communicate when contained. In the Containment Policy page have the title "Network traffic allowlist" and it only allows to add IPs or CIDR networks to exclude in the moment of the isolation of any host, because it is a global policy, not allowing make distinctions between machines.

Response and Containment

Question

Options

ATo define which Falcon analysts can contain endpoints
BTo define the duration of Network Containment
CTo define the trigger under which a machine is put in Network Containment (e.g. a critical
DTo define allowed IP addresses over which your hosts will communicate when contained

How the community answered

(28 responses)

A
4% (1)
C
7% (2)
D
89% (25)

Explanation

In the Containment Policy page have the title "Network traffic allowlist" and it only allows to add IPs or CIDR networks to exclude in the moment of the isolation of any host, because it is a global policy, not allowing make distinctions between machines.

Topics

#network containment#containment policy#IP allowlist#host isolation

Community Discussion

No community discussion yet for this question.

Full CCFA-200B Practice