Question 1

What best describes the relationship between Sensor Update policies and Operating Systems?

Options :

A : A Sensor Update policy must be configured for each Operating System (Windows, Mac, Linux)

B : Windows and Mac share Sensor Update policies. Linux requires its own set of polices based on the different kernel versions

C : Sensor Update polices are not Operating System specific. One policy can be applied to all Operating Systems

D : Windows has its own Sensor Update polices. But Mac and Linux share Sensor Update policies

Answer: A

Question 2

An administrator creating an exclusion is limited to applying a rule to how many groups of hosts?

Options :

A : File exclusions are not aligned to groups or hosts

B : There is a limit of three groups of hosts applied to any exclusion

C : There is no limit and exclusions can be applied to any or all groups

D : Each exclusion can be aligned to only one group of hosts

Answer: B

Question 3

Which role allows a user to connect to hosts using Real-Time Response?

Options :

A : Endpoint Manager

B : Falcon Administrator

C : Real Time Responder -- Active Responder

D : Prevention Hashes Manager

Answer: C

Question 4

You have a Windows host on your network in

Reduced functionality mode (RFM). While the

system is in RFM, which of the following is TRUE?

Options :

A : Event reporting will be unavailable

B : System monitoring will be unavailable

C : Prevention patterns will not be triggered

D : Some detection patterns and preventions

will not be triggered

Answer: D

Question 5

The Falcon Administrator has created a new prevention policy to apply to the "Servers" group; however, when applying the new prevention policy this group is not appearing in the list of available groups. What is the most likely issue?

Options :

A :

The new prevention policy should be enabled first

B :

Host type was not defined correctly within the prevention policy

C :

The "Servers" group already has a policy applied to it

D :

The "Servers" group must be disabled first

Answer: C

Confidently Practice Online with Free CCFA-200b Exam Cram

Buying Options: