nerdexam
CrowdStrike

CCFA-200B · Question #16

What impact does disabling detections on a host have on an API?

The correct answer is C. DetectionSummaryEvent stops sending to the Streaming API for that host. Disabling detections on a host will stop the DetectionSummaryEvent from sending to the Streaming API for that host. This means that the host will not send any detection events to the Streaming API, which is used to stream data from the Falcon Cloud to external applications or…

API and Integrations

Question

What impact does disabling detections on a host have on an API?

Options

  • AEndpoints with detections disabled will not alert on anything until detections are enabled again
  • BEndpoints cannot have their detections disabled individually
  • CDetectionSummaryEvent stops sending to the Streaming API for that host
  • DEndpoints with detections disabled will not alert on anything for 24 hours (by default) or longer if

How the community answered

(24 responses)
  • A
    17% (4)
  • B
    4% (1)
  • C
    75% (18)
  • D
    4% (1)

Explanation

Disabling detections on a host will stop the DetectionSummaryEvent from sending to the Streaming API for that host. This means that the host will not send any detection events to the Streaming API, which is used to stream data from the Falcon Cloud to external applications or systems. The other options are either incorrect or not related to disabling detections on a host.

Topics

#detection suppression#Streaming API#DetectionSummaryEvent#API integration

Community Discussion

No community discussion yet for this question.

Full CCFA-200B Practice