CCFA-200B · Question #91
Which of the following prevention policy settings monitors contents of scripts and shells for execution of malicious content on compatible operating systems?
The correct answer is A. Script-based Execution Monitoring. The prevention policy setting that monitors contents of scripts and shells for execution of malicious content on compatible operating systems is Script-based Execution Monitoring. Script- based Execution Monitoring is a feature that enables the Falcon sensor to monitor and preven
Question
Which of the following prevention policy settings monitors contents of scripts and shells for execution of malicious content on compatible operating systems?
Options
- AScript-based Execution Monitoring
- BFileSystem Visibility
- CEngine (Full Visibility)
- DSuspicious Scripts and Commands
How the community answered
(46 responses)- A87% (40)
- B2% (1)
- C9% (4)
- D2% (1)
Explanation
The prevention policy setting that monitors contents of scripts and shells for execution of malicious content on compatible operating systems is Script-based Execution Monitoring. Script- based Execution Monitoring is a feature that enables the Falcon sensor to monitor and prevent malicious script execution on Windows systems. The feature uses machine learning and behavioral analysis to detect suspicious scripts or commands executed by various script interpreters, such as PowerShell, WScript, CScript, or Bash. You can enable or disable Script- based Execution Monitoring in the Prevention Policy for Windows hosts.
Topics
Community Discussion
No community discussion yet for this question.