CCFA-200B · Question #104
An administrator creating an exclusion is limited to applying a rule to how many groups of hosts?
The correct answer is C. There is no limit and exclusions can be applied to any or all groups. An exclusion is a rule that tells the Falcon platform to ignore certain files, folders, processes, or registry keys when performing prevention or detection actions. An administrator can create an exclusion and apply it to one or more groups of hosts, or to all hosts in the…
Question
An administrator creating an exclusion is limited to applying a rule to how many groups of hosts?
Options
- AFile exclusions are not aligned to groups or hosts
- BThere is a limit of three groups of hosts applied to any exclusion
- CThere is no limit and exclusions can be applied to any or all groups
- DEach exclusion can be aligned to only one group of hosts
How the community answered
(34 responses)- A3% (1)
- B6% (2)
- C88% (30)
- D3% (1)
Explanation
An exclusion is a rule that tells the Falcon platform to ignore certain files, folders, processes, or registry keys when performing prevention or detection actions. An administrator can create an exclusion and apply it to one or more groups of hosts, or to all hosts in the organization. For example, an administrator can create an exclusion for a legitimate application that is causing false positives and apply it to the group of hosts that are running that application.
Topics
Community Discussion
No community discussion yet for this question.