CrowdStrike
CCFA-200B · Question #193
CCFA-200B Question #193: Real Exam Question with Answer & Explanation
Sign in or unlock CCFA-200B to reveal the answer and full explanation for question #193. The question stem and answer options stay visible for context.
Question
During a Windows system investigation via Real Time Response (RTR), an RTR Active Responder is unable to execute a custom powershell script for finding specific system artifacts. What is likely restricting the responder from executing the powershell script?
Options
- AScript-Based Execution Monitoring is not enabled in the prevention policy
- BCustom Scripts is not enabled in the response policy
- CThe responder requires the RTR Administrator role
- DPut-and-Run is not enabled in the response policy
Unlock CCFA-200B to see the answer
You've previewed enough free CCFA-200B questions. Unlock CCFA-200B for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.