Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

CrowdStrike Exam CCFA-200 Topic 4 Question 40 Discussion

Actual exam question for CrowdStrike's CCFA-200 exam
Question #: 40
Topic #: 4
[All CCFA-200 Questions]

What best describes what happens to detections in the console after clicking "Enable Detections" for a host which previously had its detections disabled?

Show Suggested Answer Hide Answer
Suggested Answer: C

The option that best describes what happens to detections in the console after clicking ''Enable Detections'' for a host which previously had its detections disabled is that new detections will start appearing in the console immediately. Previous detections will not be restored to the console for that host. The ''Enable Detections'' feature allows you to enable or disable the detection and prevention capabilities of the Falcon sensor on a specific host. When you disable detections for a host, the sensor will stop sending any detection or prevention events to the Falcon console, and any existing events for that host will be removed from the console.When you enable detections for a host, the sensor will resume sending any new detection or prevention events to the Falcon console, but any previous events for that host will not be restored to the console1.


by Leslee at Aug 25, 2024, 03:34 PM

Limited Time Offer

25%

Off

Get Premium CCFA-200 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel
Annamae
10 months ago
I'm pretty sure the answer is C. Who wants to see a bunch of old detections anyway? We need to focus on the new stuff.
upvoted 0 times
...
Jesse
10 months ago
Lol, is D an option just to trick us? Enabling detections has nothing to do with preventions!
upvoted 0 times
Xuan
10 months ago
D) Preventions will be enabled for the host
upvoted 0 times
...
Mabel
10 months ago
C) New detections will start appearing in the console immediately. Previous detections will not be restored to the console for that host
upvoted 0 times
...
Yolande
10 months ago
B) New detections will start appearing in the console, and all retroactive stored detections will be restored to the console for that host
upvoted 0 times
...
Yuonne
10 months ago
A) Enables custom detections for the host
upvoted 0 times
...
...
Irma
11 months ago
I think you're both wrong. The answer is A, it enables custom detections for the host.
upvoted 0 times
...
Jacquline
11 months ago
But enabling detections should bring back all previous detections, right?
upvoted 0 times
...
Lore
11 months ago
I disagree, I believe the correct answer is C.
upvoted 0 times
...
Stephaine
11 months ago
I'm going with A. Enabling detections must mean you're setting up custom detections for that host, right?
upvoted 0 times
Jaclyn
11 months ago
B) New detections will start appearing in the console, and all retroactive stored detections will be restored to the console for that host
upvoted 0 times
...
Davida
11 months ago
A) Enables custom detections for the host
upvoted 0 times
...
...
Jacquline
11 months ago
I think the answer is B.
upvoted 0 times
...
Fredric
11 months ago
B sounds right to me. If you enable detections, you should see both new detections as well as any previously stored ones for that host.
upvoted 0 times
Jaleesa
11 months ago
I agree. It's important to have all the information available in the console after enabling detections.
upvoted 0 times
...
Delsie
11 months ago
Yes, enabling detections should bring back all previous detections for that host.
upvoted 0 times
...
Noble
11 months ago
Yes, that's what I understood too. It makes sense to have both new and old detections show up.
upvoted 0 times
...
Yan
11 months ago
I think B is correct. It says new detections will start appearing and previous ones will be restored.
upvoted 0 times
...
Paola
11 months ago
I think B is correct. You will see new detections and previously stored ones.
upvoted 0 times
...
...
Kristofer
12 months ago
I think C is the correct answer. Once you enable detections for a host, new detections will start appearing in the console, but previous detections won't be restored.
upvoted 0 times
Glen
11 months ago
I'm not sure, but I think it's A. Custom detections are enabled for the host.
upvoted 0 times
...
Aliza
11 months ago
I agree with B, that's how it usually works.
upvoted 0 times
...
Lorrie
11 months ago
I believe it's B. New detections will start appearing and previous ones will be restored.
upvoted 0 times
...
Tandra
11 months ago
I think C is the correct answer.
upvoted 0 times
...
...

Save Cancel