CrowdStrike
CCFA-200B · Question #71
You have been asked to troubleshoot why Script Based Execution Monitoring (SBEM) is not enabled on a Falcon host. Which report can be used to determine if this is an issue with an old prevention…
Sign in or unlock CCFA-200B to reveal the answer and full explanation for question #71. The question stem and answer options stay visible for context.
Prevention Policy Configuration
Question
You have been asked to troubleshoot why Script Based Execution Monitoring (SBEM) is not enabled on a Falcon host. Which report can be used to determine if this is an issue with an old prevention policy?
Options
- AHost Update Status Report
- BCustom Alerting Audit Trail
- CPrevention Policy Debug
- DSBEM Debug Report
Unlock CCFA-200B to see the answer
You've previewed enough free CCFA-200B questions. Unlock CCFA-200B for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#SBEM#Script Based Execution Monitoring#prevention policy#troubleshooting reports