What would be the most appropriate action to take if you wanted to prevent a folder from being uploaded to the cloud without disabling uploads globally?

The correct answer is D. A Custom IOC entry. The most appropriate action to take if you wanted to prevent a folder from being uploaded to the cloud without disabling uploads globally is to create a Custom IOC entry. A Custom IOC (indicator of compromise) entry allows you to define custom rules for detecting or preventing…

Exclusions and IOC Management

Question

Options

AA Machine Learning exclusion
BA Sensor Visibility exclusion
CAn IOA exclusion
DA Custom IOC entry

How the community answered

(44 responses)

A
9% (4)
B
7% (3)
C
2% (1)
D
82% (36)

Explanation

The most appropriate action to take if you wanted to prevent a folder from being uploaded to the cloud without disabling uploads globally is to create a Custom IOC entry. A Custom IOC (indicator of compromise) entry allows you to define custom rules for detecting or preventing malicious activity based on file hashes, file paths, IP addresses, or domains. You can use regex (regular expression) syntax to create a Custom IOC entry that matches the folder path that you want to block from being uploaded to the cloud.

Topics

#Custom IOC#upload prevention#cloud exclusions#folder management

Community Discussion

No community discussion yet for this question.

Full CCFA-200B Practice