nerdexam
CrowdStrike

CCFA-200B · Question #45

When the Notify End Users policy setting is turned on, which of the following is TRUE?

The correct answer is C. End-users receive a pop-up notification when a prevention action occurs. When the Notify End Users policy setting is turned on, end-users receive a pop-up notification when a prevention action occurs. This setting allows you to inform the end-users that the Falcon sensor has blocked or quarantined a malicious item on their system. The notification…

Prevention Policy Configuration

Question

When the Notify End Users policy setting is turned on, which of the following is TRUE?

Options

  • AEnd users will not be notified as we would not want to notify a malicious actor of a detection. This
  • BEnd users will be immediately notified via a pop-up that their machine is in-network isolation
  • CEnd-users receive a pop-up notification when a prevention action occurs
  • DEnd users will receive a pop-up allowing them to confirm or refuse a pending quarantine

How the community answered

(15 responses)
  • A
    7% (1)
  • B
    7% (1)
  • C
    87% (13)

Explanation

When the Notify End Users policy setting is turned on, end-users receive a pop-up notification when a prevention action occurs. This setting allows you to inform the end-users that the Falcon sensor has blocked or quarantined a malicious item on their system. The notification will also provide the name and path of the item, the reason for the prevention, and a link to contact support if needed.

Topics

#end user notifications#prevention policy#pop-up alerts#policy settings

Community Discussion

No community discussion yet for this question.

Full CCFA-200B Practice