Which of the following is TRUE regarding disabling detections for a host?

The correct answer is D. The detections for that host are removed from the console immediately. No new detections will. The option that is true regarding disabling detections for a host is that the detections for that host are removed from the console immediately. No new detections will display in the console going forward unless detections are enabled. This option is essentially a repetition of q

Detection Management

Question

Options

AAfter disabling detections, the host will operate in Reduced Functionality Mode (RFM) until
BAfter disabling detections, the data for all existing detections prior to disabling detections is
CThe DetectionSummaryEvent continues being sent to the Streaming API for that host
DThe detections for that host are removed from the console immediately. No new detections will

How the community answered

(36 responses)

A
6% (2)
B
3% (1)
C
3% (1)
D
89% (32)

Explanation

The option that is true regarding disabling detections for a host is that the detections for that host are removed from the console immediately. No new detections will display in the console going forward unless detections are enabled. This option is essentially a repetition of question 127 and its answer. Disabling detections for a host will remove any existing detections for that host from the console and prevent any new detections from appearing in the console until detections are

Topics

#Disable Detections#DetectionSummaryEvent#Streaming API#detection console

Community Discussion

No community discussion yet for this question.

Full CCFA-200B Practice