Which of the following applies to Custom Blocking Prevention Policy settings?

The correct answer is A. Hashes must be entered on the Prevention Hashes page before they can be blocked via this. Falcon allows you to upload hashes from your own black or white lists. To enabled this navigate to the Configuration App, Prevention hashes window, and click on "Upload Hashes" in the upper right-hand corner. Note that you can also automate the task of importing hashes with the C

Prevention Policies and Configuration

Question

Options

AHashes must be entered on the Prevention Hashes page before they can be blocked via this
BBlocklisting applies to hashes, IP addresses, and domains
CExecutions blocked via hash blocklist may have partially executed prior to hash calculation
DYou can only blocklist hashes via the API

How the community answered

(29 responses)

A
90% (26)
B
7% (2)
C
3% (1)

Explanation

Falcon allows you to upload hashes from your own black or white lists. To enabled this navigate to the Configuration App, Prevention hashes window, and click on "Upload Hashes" in the upper right-hand corner. Note that you can also automate the task of importing hashes with the CrowdStrike Falcon?API.

Topics

#Custom Blocking#Prevention Hashes#Hash Blocklist#Prevention Policy

Community Discussion

No community discussion yet for this question.

Full CCFA-200B Practice