You are beginning the rollout of the Falcon Sensor for the first time side-by-side with your existing security solution. You need to configure the Machine Learning levels of the Prevention Policy so…

The correct answer is C. Detection slider: Cautious. Explanation:The best settings to configure the Machine Learning levels of the Prevention Policy so it does not interfere with existing solutions during the testing phase are Cautious for both Detection and Prevention sliders. This setting will enable the sensor to detect and…

Prevention Policy Configuration

Question

You are beginning the rollout of the Falcon Sensor for the first time side-by-side with your existing security solution. You need to configure the Machine Learning levels of the Prevention Policy so it does not interfere with existing solutions during the testing phase. What settings do you choose?

Options

ADetection slider: Extra Aggressive
BDetection slider: Moderate
CDetection slider: Cautious
DDetection slider: Disabled

How the community answered

(39 responses)

A
5% (2)
B
10% (4)
C
82% (32)
D
3% (1)

Explanation

Explanation:The best settings to configure the Machine Learning levels of the Prevention Policy so it does not interfere with existing solutions during the testing phase are Cautious for both Detection and Prevention sliders. This setting will enable the sensor to detect and prevent only high-confidence malicious events, while allowing low-confidence events to run without interference. This setting will also generate less noise and false positives than higher settings, such as Moderate or Extra Aggressive.

Topics

#machine learning levels#prevention policy#cautious mode#coexistence testing

Community Discussion

No community discussion yet for this question.

Full CCFA-200B Practice