CrowdStrike

CCFA-200B · Question #178

What is the best way to write an ML exclusion for any executable file at "C:\Program Files\Software\"?

The correct answer is D. Program Files\Software\*.exe. You've hit your limit · resets 12:50am (America/New_York)

Exclusions and Tuning

Question

What is the best way to write an ML exclusion for any executable file at "C:\Program Files\Software"?

Options

AYou cannot. You must list a specific file in an exclusion rule
BProgram Files\Software**
CProgram Files\Software.*
DProgram Files\Software*.exe

How the community answered

(26 responses)

A
4% (1)
B
12% (3)
C
4% (1)
D
81% (21)

Explanation

You've hit your limit · resets 12:50am (America/New_York)

Topics

#ML exclusion#wildcard file path#exclusion syntax#prevention tuning

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion

Full CCFA-200B Practice