CrowdStrike
CCFA-200B · Question #234
A host has been Network contained with Falcon and you have been asked to update the Operating System with zero day patches. You have tried using your patch update systems for this task, but the jobs…
The correct answer is A. Create a Containment Policy that allow lists the specific IP addresses of your patch management. You've hit your limit · resets 12:50am (America/New_York)
Host Containment
Question
A host has been Network contained with Falcon and you have been asked to update the Operating System with zero day patches. You have tried using your patch update systems for this task, but the jobs fail. Which configuration steps in the Falcon UI will allow these activities?
Options
- ACreate a Containment Policy that allow lists the specific IP addresses of your patch management
- BCreate a Containment Policy that allow lists the Fully Qualified name of your patch management
- CRemove Host containment and update the host with all patches
- DCreate a Firewall Policy that allow lists your patch management tools
How the community answered
(37 responses)- A78% (29)
- B5% (2)
- C14% (5)
- D3% (1)
Explanation
You've hit your limit · resets 12:50am (America/New_York)
Topics
#network containment#containment policy#patch management#IP allow listing
Community Discussion
No community discussion yet for this question.