You want to create a detection-only policy. How do you set this up in your policy's settings?

The correct answer is D. Set the Next-Gen Antivirus detection settings to the desired detection level and all the prevention. The administrator can create a detection-only policy by setting the Next-Gen Antivirus detection settings to the desired detection level and all the prevention sliders to disabled in the policy's settings. This will allow Falcon to detect but not prevent threats on the hosts…

Prevention Policy Configuration

Question

Options

AEnable the detection sliders and disable the prevention sliders. Then ensure that Next Gen
BSelect the "Detect-Only" template. Disable hash blocking and exclusions.
CYou can't create a policy that detects but does not prevent. Use Custom IOA rules to detect.
DSet the Next-Gen Antivirus detection settings to the desired detection level and all the prevention

How the community answered

(37 responses)

A
14% (5)
B
5% (2)
C
3% (1)
D
78% (29)

Explanation

The administrator can create a detection-only policy by setting the Next-Gen Antivirus detection settings to the desired detection level and all the prevention sliders to disabled in the policy's settings. This will allow Falcon to detect but not prevent threats on the hosts using this policy. Do not activate any of the other blocking or malware prevention options, as they will enable prevention actions. The other options are either incorrect or not related to creating a detection-

Topics

#detection-only policy#prevention sliders#Next-Gen Antivirus#policy configuration

Community Discussion

No community discussion yet for this question.

Full CCFA-200B Practice