CrowdStrike
CCFA-200B · Question #21
CCFA-200B Question #21: Real Exam Question with Answer & Explanation
Sign in or unlock CCFA-200B to reveal the answer and full explanation for question #21. The question stem and answer options stay visible for context.
Question
You have been provided with a list of 100 hashes that are not malicious but your company has deemed to be inappropriate for work computers. They have asked you to ensure that they are not allowed to run in your environment. You have chosen to use Falcon to do this. Which is the best way to accomplish this?
Options
- AUsing the Support Portal, create a support ticket and include the list of binary hashes, asking
- BUsing Custom Alerts in the Investigate App, create a new alert using the template "Process
- CUsing IOC Management, gather the list of SHA256 or MD5 hashes for each binary and then
- DUsing the API, gather the list of SHA256 or MD5 hashes for each binary and then upload them,
Unlock CCFA-200B to see the answer
You've previewed enough free CCFA-200B questions. Unlock CCFA-200B for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.