U.S. Independence Day Deal! Unlock 25% OFF Today – Limited-Time Offer - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

CrowdStrike CCFA-200b Exam - Topic 7 Question 13 Discussion

Which of the following applies to Custom Blocking Prevention Policy settings?
A) Hashes must be entered on the Prevention Hashes page before they can be blocked via this policy
B) Blocklisting applies to hashes, IP addresses, and domains
C) Executions blocked via hash blocklist may have partially executed prior to hash calculation process remediation may be necessary
D) You can only blocklist hashes via the API

CrowdStrike CCFA-200b Exam - Topic 7 Question 13 Discussion

Actual exam question for CrowdStrike's CCFA-200b exam
Question #: 13
Topic #: 7
[All CCFA-200b Questions]

Which of the following applies to Custom Blocking Prevention Policy settings?

Show Suggested Answer Hide Answer
Suggested Answer: A

Falcon allows you to upload hashes from your own black or white lists. To enabled this navigate to the Configuration App, Prevention hashes window, and click on ''Upload Hashes'' in the upper right-hand corner. Note that you can also automate the task of importing hashes with the CrowdStrike Falcon API.

https://www.crowdstrike.com/blog/tech-center/how-to-prevent-malware-with-custom-blacklisting/


Contribute your Thoughts:

0/2000 characters

Currently there are no comments in this discussion, be the first to comment!


Save Cancel