CrowdStrike
CCFA-200B · Question #152
Which of the following is an effective Custom IOA rule pattern to kill any process attempting to
Sign in or unlock CCFA-200B to reveal the answer and full explanation for question #152. The question stem and answer options stay visible for context.
Detection and Prevention Policies
Question
Which of the following is an effective Custom IOA rule pattern to kill any process attempting to
Options
- A.badguydomain.com.
- Cbadguydomain.com.*
- DCustom IOA rules cannot be created for domains
Unlock CCFA-200B to see the answer
You've previewed enough free CCFA-200B questions. Unlock CCFA-200B for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Custom IOA rules#regex patterns#domain matching#rule authoring