nerdexam
CrowdStrike

CCFA-200B · Question #121

You are evaluating the most appropriate Prevention Policy Machine Learning slider settings for your environment. In your testing phase, you configure the Detection slider as Aggressive. After running

The correct answer is D. Machine-Learning Prevention Monitoring. Audit logs --> Machine-learning prevention monitoring It shows the count of ML expected detections based on the detection levels for a defined time period and the list of files that would be detected on each detection level.

Prevention Policies and Configuration

Question

You are evaluating the most appropriate Prevention Policy Machine Learning slider settings for your environment. In your testing phase, you configure the Detection slider as Aggressive. After running the sensor with this configuration for 1 week of testing, which Audit report should you review to determine the best Machine Learning slider settings for your organization?

Options

  • APrevention Policy Audit Trail
  • BPrevention Policy Debug
  • CPrevention Hashes Ignored
  • DMachine-Learning Prevention Monitoring

How the community answered

(50 responses)
  • A
    2% (1)
  • B
    4% (2)
  • C
    8% (4)
  • D
    86% (43)

Explanation

Audit logs --> Machine-learning prevention monitoring It shows the count of ML expected detections based on the detection levels for a defined time period and the list of files that would be detected on each detection level.

Topics

#Machine Learning Prevention#Prevention Policy#Audit Reports#Detection Slider

Community Discussion

No community discussion yet for this question.

Full CCFA-200B Practice