CrowdStrike

CCFR-201B · Question #63

What would be a logical next step after identifying an unmanaged host in Host Search?

The correct answer is D. Investigate how it connected and initiate containment. You've hit your limit · resets 12:50am (America/New_York)

Incident Response

Question

What would be a logical next step after identifying an unmanaged host in Host Search?

Options

AQuarantine the host
BBlock its public IP
CAdd the host to a monitoring policy
DInvestigate how it connected and initiate containment

How the community answered

(36 responses)

A
17% (6)
B
3% (1)
C
8% (3)
D
72% (26)

Explanation

You've hit your limit · resets 12:50am (America/New_York)

Topics

#unmanaged host#host investigation#containment#incident response workflow

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion

Full CCFR-201B Practice