nerdexam
CrowdStrike

CCFA-200B · Question #218

As a Falcon Administrator, you would like to tune your Prevention Policies and compare the number of detections that would have resulted in the last 30 days depending on which detection level was…

The correct answer is A. Machine-learning prevention monitoring. You've hit your limit · resets 12:50am (America/New_York)

Prevention Policy Management

Question

As a Falcon Administrator, you would like to tune your Prevention Policies and compare the number of detections that would have resulted in the last 30 days depending on which detection level was used (Cautious, Moderate, Aggressive or Extra Aggressive). Which audit logs would best help you evaluate the appropriate setting to use?

Options

  • AMachine-learning prevention monitoring
  • BPrevention policy
  • CPolicy efficacy monitoring
  • DPrevention policy debug

How the community answered

(63 responses)
  • A
    67% (42)
  • B
    3% (2)
  • C
    21% (13)
  • D
    10% (6)

Explanation

You've hit your limit · resets 12:50am (America/New_York)

Topics

#ML prevention monitoring#prevention policy tuning#audit logs#detection level evaluation

Community Discussion

No community discussion yet for this question.

Full CCFA-200B Practice