Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 0d 15h 22m 30s Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

CrowdStrike Exam CCFA-200 Topic 4 Question 40 Discussion

Actual exam question for CrowdStrike's CCFA-200 exam
Question #: 40
Topic #: 4
[All CCFA-200 Questions]

What best describes what happens to detections in the console after clicking "Enable Detections" for a host which previously had its detections disabled?

Show Suggested Answer Hide Answer
Suggested Answer: C

The option that best describes what happens to detections in the console after clicking ''Enable Detections'' for a host which previously had its detections disabled is that new detections will start appearing in the console immediately. Previous detections will not be restored to the console for that host. The ''Enable Detections'' feature allows you to enable or disable the detection and prevention capabilities of the Falcon sensor on a specific host. When you disable detections for a host, the sensor will stop sending any detection or prevention events to the Falcon console, and any existing events for that host will be removed from the console.When you enable detections for a host, the sensor will resume sending any new detection or prevention events to the Falcon console, but any previous events for that host will not be restored to the console1.


by Leslee at Aug 25, 2024, 03:34 PM

Limited Time Offer

25%

Off

Get Premium CCFA-200 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel
Annamae
8 months ago
I'm pretty sure the answer is C. Who wants to see a bunch of old detections anyway? We need to focus on the new stuff.
upvoted 0 times
...
Jesse
8 months ago
Lol, is D an option just to trick us? Enabling detections has nothing to do with preventions!
upvoted 0 times
Xuan
8 months ago
D) Preventions will be enabled for the host
upvoted 0 times
...
Mabel
8 months ago
C) New detections will start appearing in the console immediately. Previous detections will not be restored to the console for that host
upvoted 0 times
...
Yolande
8 months ago
B) New detections will start appearing in the console, and all retroactive stored detections will be restored to the console for that host
upvoted 0 times
...
Yuonne
8 months ago
A) Enables custom detections for the host
upvoted 0 times
...
...
Irma
9 months ago
I think you're both wrong. The answer is A, it enables custom detections for the host.
upvoted 0 times
...
Jacquline
9 months ago
But enabling detections should bring back all previous detections, right?
upvoted 0 times
...
Lore
9 months ago
I disagree, I believe the correct answer is C.
upvoted 0 times
...
Stephaine
9 months ago
I'm going with A. Enabling detections must mean you're setting up custom detections for that host, right?
upvoted 0 times
Jaclyn
9 months ago
B) New detections will start appearing in the console, and all retroactive stored detections will be restored to the console for that host
upvoted 0 times
...
Davida
9 months ago
A) Enables custom detections for the host
upvoted 0 times
...
...
Jacquline
9 months ago
I think the answer is B.
upvoted 0 times
...
Fredric
9 months ago
B sounds right to me. If you enable detections, you should see both new detections as well as any previously stored ones for that host.
upvoted 0 times
Jaleesa
9 months ago
I agree. It's important to have all the information available in the console after enabling detections.
upvoted 0 times
...
Delsie
9 months ago
Yes, enabling detections should bring back all previous detections for that host.
upvoted 0 times
...
Noble
9 months ago
Yes, that's what I understood too. It makes sense to have both new and old detections show up.
upvoted 0 times
...
Yan
9 months ago
I think B is correct. It says new detections will start appearing and previous ones will be restored.
upvoted 0 times
...
Paola
9 months ago
I think B is correct. You will see new detections and previously stored ones.
upvoted 0 times
...
...
Kristofer
10 months ago
I think C is the correct answer. Once you enable detections for a host, new detections will start appearing in the console, but previous detections won't be restored.
upvoted 0 times
Glen
9 months ago
I'm not sure, but I think it's A. Custom detections are enabled for the host.
upvoted 0 times
...
Aliza
9 months ago
I agree with B, that's how it usually works.
upvoted 0 times
...
Lorrie
9 months ago
I believe it's B. New detections will start appearing and previous ones will be restored.
upvoted 0 times
...
Tandra
9 months ago
I think C is the correct answer.
upvoted 0 times
...
...

Save Cancel
a