nerdexam
CrowdStrike

CCFA-200B · Question #114

How can a Falcon Administrator configure a pop-up message to be displayed on a host when the Falcon sensor blocks, kills or quarantines an activity?

The correct answer is C. By turning on the "Notify End Users" setting at the top of the Prevention policy details. A Falcon Administrator can configure a pop-up message to be displayed on a host when the Falcon sensor blocks, kills or quarantines an activity by turning on the "Notify End Users" setting at the top of the Prevention policy details configuration page. This setting allows users t

Prevention Policies and Exclusions

Question

How can a Falcon Administrator configure a pop-up message to be displayed on a host when the Falcon sensor blocks, kills or quarantines an activity?

Options

  • ABy ensuring each user has set the "pop-ups allowed" in their User Profile configuration page
  • BBy enabling "Upload quarantined files" in the General Settings configuration page
  • CBy turning on the "Notify End Users" setting at the top of the Prevention policy details
  • DBy selecting "Enable pop-up messages" from the User configuration page

How the community answered

(42 responses)
  • A
    2% (1)
  • B
    2% (1)
  • C
    90% (38)
  • D
    5% (2)

Explanation

A Falcon Administrator can configure a pop-up message to be displayed on a host when the Falcon sensor blocks, kills or quarantines an activity by turning on the "Notify End Users" setting at the top of the Prevention policy details configuration page. This setting allows users to enable or disable end user notifications for prevention actions taken by Falcon on Windows hosts. The other options are either incorrect or not related to configuring pop-up messages.

Topics

#prevention policy#end-user notification#quarantine alerts#policy configuration

Community Discussion

No community discussion yet for this question.

Full CCFA-200B Practice