CrowdStrike
CCFR-201B · Question #32
CCFR-201B Question #32: Real Exam Question with Answer & Explanation
The correct answer is B. Execution is prevented on selected host groups. See the full explanation below for the reasoning.
Question
What happens when a hash is set to Always Block through IOC Management?
Options
- AExecution is prevented on all hosts by default
- BExecution is prevented on selected host groups
- CExecution is prevented and detection alerts are suppressed
- DThe hash is submitted for approval to be blocked from execution once confirmed by Falcon
Community Discussion
No community discussion yet for this question.