nerdexam
CrowdStrike

CCFA-200B · Question #91

Which of the following prevention policy settings monitors contents of scripts and shells for execution of malicious content on compatible operating systems?

The correct answer is A. Script-based Execution Monitoring. The prevention policy setting that monitors contents of scripts and shells for execution of malicious content on compatible operating systems is Script-based Execution Monitoring. Script- based Execution Monitoring is a feature that enables the Falcon sensor to monitor and preven

Prevention Policy Management

Question

Which of the following prevention policy settings monitors contents of scripts and shells for execution of malicious content on compatible operating systems?

Options

  • AScript-based Execution Monitoring
  • BFileSystem Visibility
  • CEngine (Full Visibility)
  • DSuspicious Scripts and Commands

How the community answered

(46 responses)
  • A
    87% (40)
  • B
    2% (1)
  • C
    9% (4)
  • D
    2% (1)

Explanation

The prevention policy setting that monitors contents of scripts and shells for execution of malicious content on compatible operating systems is Script-based Execution Monitoring. Script- based Execution Monitoring is a feature that enables the Falcon sensor to monitor and prevent malicious script execution on Windows systems. The feature uses machine learning and behavioral analysis to detect suspicious scripts or commands executed by various script interpreters, such as PowerShell, WScript, CScript, or Bash. You can enable or disable Script- based Execution Monitoring in the Prevention Policy for Windows hosts.

Topics

#Script-based Execution Monitoring#prevention policy#malicious scripts#shell execution

Community Discussion

No community discussion yet for this question.

Full CCFA-200B Practice