CrowdStrike
CCFA-200B · Question #251
You have 100 hashes that have been prohibited by management and need to be blocked within your organization. Using Falcon, what is the best way to accomplish this?
The correct answer is C. Navigate to Configure > IOC Management. Inside this dashboard, add a custom IOAdd the list of. You've hit your limit · resets 12:50am (America/New_York)
Threat Intelligence and IOC Management
Question
You have 100 hashes that have been prohibited by management and need to be blocked within your organization. Using Falcon, what is the best way to accomplish this?
Options
- ANavigate to Configure > IOC Management. Inside this dashboard, add a custom Prevention
- BNavigate to Configure > Prevention policies. Inside this dashboard, add an IOC Policy. Add the
- CNavigate to Configure > IOC Management. Inside this dashboard, add a custom IOAdd the list of
- DNavigate to Configure > Prevention policies. Inside this dashboard, add an IOC Policy. Add the
How the community answered
(64 responses)- A5% (3)
- B9% (6)
- C84% (54)
- D2% (1)
Explanation
You've hit your limit · resets 12:50am (America/New_York)
Topics
#IOC Management#Hash blocking#Custom IOC#Bulk import
Community Discussion
No community discussion yet for this question.