Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

CrowdStrike CCFA-200b Exam - Topic 4 Question 11 Discussion

What is the function of a single asterisk (*) in an ML exclusion pattern?
B) The single asterisk will match any number of characters, including none. It does not include separator characters, such as \ or /, which separate portions of a file path
A) The single asterisk will match any number of characters, including none. It does include separator characters, such as \ or /, which separate portions of a file path
C) The single asterisk is the insertion point for the variable list that follows the path
D) The single asterisk is only used to start an expression, and it represents the drive letter

CrowdStrike CCFA-200b Exam - Topic 4 Question 11 Discussion

Actual exam question for CrowdStrike's CCFA-200b exam
Question #: 11
Topic #: 4
[All CCFA-200b Questions]

What is the function of a single asterisk (*) in an ML exclusion pattern?

Show Suggested Answer Hide Answer
Suggested Answer: B

The asterisk is a wildcard character that can be used in exclusion patterns to match any number of characters. However, it does not match separator characters, such as or /, which are used to separate portions of a file path. For example, the patternC:Windows**.exewill match any executable file in any subfolder of the Windows folder, but not in the Windows folder itself.

Contribute your Thoughts:

0/2000 characters
Julianna
2 days ago
I’m a bit confused about the role of the asterisk. I thought it was just for matching characters, but I can't recall if it has anything to do with variable lists.
upvoted 0 times
...
Cecily
7 days ago
I remember practicing a question similar to this, and I think the asterisk does include separators. So, I might lean towards option A.
upvoted 0 times
...
Laurel
12 days ago
I think the single asterisk matches any number of characters, but I'm not sure if it includes separators like \ or /.
upvoted 0 times
...

Save Cancel