nerdexam
CrowdStrike

CCFA-200B · Question #104

An administrator creating an exclusion is limited to applying a rule to how many groups of hosts?

The correct answer is C. There is no limit and exclusions can be applied to any or all groups. An exclusion is a rule that tells the Falcon platform to ignore certain files, folders, processes, or registry keys when performing prevention or detection actions. An administrator can create an exclusion and apply it to one or more groups of hosts, or to all hosts in the…

Prevention Policies and Exclusions

Question

An administrator creating an exclusion is limited to applying a rule to how many groups of hosts?

Options

  • AFile exclusions are not aligned to groups or hosts
  • BThere is a limit of three groups of hosts applied to any exclusion
  • CThere is no limit and exclusions can be applied to any or all groups
  • DEach exclusion can be aligned to only one group of hosts

How the community answered

(34 responses)
  • A
    3% (1)
  • B
    6% (2)
  • C
    88% (30)
  • D
    3% (1)

Explanation

An exclusion is a rule that tells the Falcon platform to ignore certain files, folders, processes, or registry keys when performing prevention or detection actions. An administrator can create an exclusion and apply it to one or more groups of hosts, or to all hosts in the organization. For example, an administrator can create an exclusion for a legitimate application that is causing false positives and apply it to the group of hosts that are running that application.

Topics

#exclusions#host groups#policy scope#configuration limits

Community Discussion

No community discussion yet for this question.

Full CCFA-200B Practice