nerdexam
CrowdStrike

CCFA-200B · Question #13

While a host is Network contained, you need to allow the host to access internal network resources on specific IP addresses to perform patching and remediation. Which configuration would you choose?

The correct answer is B. Configure a Containment Policy with the specific IP addresses. While a host is Network contained, the administrator can allow the host to access internal network resources on specific IP addresses to perform patching and remediation by configuring a Containment Policy with the specific IP addresses. This policy allows users to specify…

Response and Containment

Question

While a host is Network contained, you need to allow the host to access internal network resources on specific IP addresses to perform patching and remediation. Which configuration would you choose?

Options

  • AConfigure a Real Time Response policy allowlist with the specific IP addresses
  • BConfigure a Containment Policy with the specific IP addresses
  • CConfigure a Containment Policy with the entire internal IP CIDR block
  • DConfigure the Host firewall to allowlist the specific IP addresses

How the community answered

(40 responses)
  • A
    15% (6)
  • B
    73% (29)
  • C
    5% (2)
  • D
    8% (3)

Explanation

While a host is Network contained, the administrator can allow the host to access internal network resources on specific IP addresses to perform patching and remediation by configuring a Containment Policy with the specific IP addresses. This policy allows users to specify which ports, protocols and IP addresses are allowed or blocked during network containment. The other options are either incorrect or not related to network containment.

Topics

#network containment#containment policy#IP allowlist#remediation

Community Discussion

No community discussion yet for this question.

Full CCFA-200B Practice