When a host is placed in Network Containment, which of the following is TRUE?

The correct answer is D. The host machine is unable to send or receive network traffic except to/from the Falcon Cloud. When a host is placed in Network Containment, the host machine is unable to send or receive network traffic except to/from the Falcon Cloud and any resources allowlisted in the Containment Policy. This allows users to isolate a host from the network, while still allowing it to…

Detection and Response

Question

Options

AThe host machine is unable to send or receive network traffic outside of the local network
BThe host machine is unable to send or receive network traffic except to/from the Falcon Cloud
CThe host machine is unable to send or receive any network traffic
DThe host machine is unable to send or receive network traffic except to/from the Falcon Cloud

How the community answered

(30 responses)

A
7% (2)
C
3% (1)
D
90% (27)

Explanation

When a host is placed in Network Containment, the host machine is unable to send or receive network traffic except to/from the Falcon Cloud and any resources allowlisted in the Containment Policy. This allows users to isolate a host from the network, while still allowing it to communicate with the Falcon Cloud and other essential services. The other options are either incorrect or not true of Network Containment.

Topics

#network containment#host isolation#Falcon Cloud#response actions

Community Discussion

No community discussion yet for this question.

Full CCFA-200B Practice