CrowdStrike Exam CCFR-201 Topic 1 Question 17 Discussion

Actual exam question for CrowdStrike's CCFR-201 exam

Question #: 17
Topic #: 1

The function of Machine Learning Exclusions is to___________.

Astop all detections for a specific pattern ID

Bstop all sensor data collection for the matching path(s)

CStop all Machine Learning Preventions but a detection will still be generated and files will still be uploaded to the CrowdStrike Cloud

Dstop all ML-based detections and preventions for the matching path(s) and/or stop files from being uploaded to the CrowdStrike Cloud

Show Suggested Answer

Suggested Answer: A

According to theCrowdStrike Falcon Data Replicator (FDR) Add-on for Splunk Guide, IOC Management allows you to manage indicators of compromise (IOCs), which are artifacts such as hashes, IP addresses, or domains that are associated with malicious activities2.You can set different actions for IOCs, such as Allow, No Action, or Always Block2.When you set a hash to Always Block through IOC Management, you are preventing that file from executing on any host in your organization by default2.This action also generates a detection alert when the file is blocked2.

by Edison at Jul 04, 2024, 08:53 PM

Limited Time Offer

25%

Off

Get Premium CCFR-201 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Donte

3 months ago

D is definitely the way to go. Wouldn't want my machine learning to go wild and start sending my private files to the cloud, that's for sure.

upvoted 0 times

...

Gerry

3 months ago

Haha, Machine Learning Exclusions - is that like a bouncer for the AI models? Gotta keep those rogue algorithms in check!

upvoted 0 times

Wei

2 months ago

C) Stop all Machine Learning Preventions but a detection will still be generated and files will still be uploaded to the CrowdStrike Cloud

upvoted 0 times

...

Lisandra

2 months ago

B) stop all sensor data collection for the matching path(s)

upvoted 0 times

...

Ruthann

2 months ago

A) stop all detections for a specific pattern ID

upvoted 0 times

...

Kasandra

3 months ago

A and B are too extreme - I wouldn't want to disable all detections or data collection. C seems closer, but I think D is the best choice.

upvoted 0 times

Justine

2 months ago

D would stop all ML-based detections and preventions.

upvoted 0 times

...

Raina

3 months ago

I think D is the best choice as well.

upvoted 0 times

...

Lilli

3 months ago

I agree, A and B are too extreme.

upvoted 0 times

...

Patti

4 months ago

Option D seems like the most comprehensive answer. It covers stopping both detections and preventions, as well as stopping file uploads to the cloud.

upvoted 0 times

Arlene

3 months ago

Yeah, it's important to have that level of control over the machine learning exclusions.

upvoted 0 times

...

Erick

3 months ago

I agree, option D covers all the bases.

upvoted 0 times

...

Vanda

4 months ago

That makes sense too. So, it's about excluding certain paths from the ML detections and preventing files from being uploaded to the cloud.

upvoted 0 times

...

Mattie

4 months ago

I believe it could also be to stop all sensor data collection for the matching path(s).

upvoted 0 times

...

Vanda

4 months ago

I think the function of Machine Learning Exclusions is to stop all ML-based detections and preventions for the matching path(s) and/or stop files from being uploaded to the CrowdStrike Cloud.

upvoted 0 times

...