CrowdStrike
CCFA-200B · Question #193
During a Windows system investigation via Real Time Response (RTR), an RTR Active Responder is unable to execute a custom powershell script for finding specific system artifacts. What is likely…
The correct answer is B. Custom Scripts is not enabled in the response policy. You've hit your limit · resets 12:50am (America/New_York)
Real Time Response
Question
During a Windows system investigation via Real Time Response (RTR), an RTR Active Responder is unable to execute a custom powershell script for finding specific system artifacts. What is likely restricting the responder from executing the powershell script?
Options
- AScript-Based Execution Monitoring is not enabled in the prevention policy
- BCustom Scripts is not enabled in the response policy
- CThe responder requires the RTR Administrator role
- DPut-and-Run is not enabled in the response policy
How the community answered
(27 responses)- A7% (2)
- B74% (20)
- C15% (4)
- D4% (1)
Explanation
You've hit your limit · resets 12:50am (America/New_York)
Topics
#Real Time Response#custom scripts#response policy#PowerShell execution
Community Discussion
No community discussion yet for this question.