Which of the following scenarios best describes when you would add IP addresses to the containment policy?

Question

Options

• AYou want to automate the Network Containment process based on the IP address of a host
• BYour organization has additional IP addresses that need to be able to access the Falcon console
• CA new group of analysts need to be able to place hosts under Network Containment
• DYour organization has resources that need to be accessible when hosts are network contained

• A
  3% (2)
• B
  5% (3)
• C
  2% (1)
• D
  90% (52)

Explanation

The scenario that best describes when you would add IP addresses to the containment policy is that your organization has resources that need to be accessible when hosts are network contained. As explained in the previous question, adding IP addresses to the containment policy allows you to create an allowlist of trusted IP addresses that can communicate with your contained hosts. This can be useful when you need to isolate a host from the network due to a potential compromise or investigation, but still want to allow it to access certain resources or services that are essential for your organization's operations or security.

No community discussion yet for this question.