nerdexam
CrowdStrike

CCFR-201B · Question #41

What happens when a hash is allowlisted?

The correct answer is D. Execution is allowed on all hosts that fall under the organization's CID. You've hit your limit · resets 12:50am (America/New_York)

Prevention Policy Management

Question

What happens when a hash is allowlisted?

Options

  • AExecution is prevented, but detection alerts are suppressed
  • BExecution is allowed on all hosts, including all other Falcon customers
  • CThe hash is submitted for approval to be allowed to execute once confirmed by Falcon specialists
  • DExecution is allowed on all hosts that fall under the organization's CID

How the community answered

(36 responses)
  • A
    3% (1)
  • B
    3% (1)
  • D
    94% (34)

Explanation

You've hit your limit · resets 12:50am (America/New_York)

Topics

#hash allowlisting#prevention policy#CID scope#execution control

Community Discussion

No community discussion yet for this question.

Full CCFR-201B Practice