CrowdStrike Exam CCFR-201 Topic 1 Question 17 Discussion

Actual exam question for CrowdStrike's CCFR-201 exam

Question #: 17
Topic #: 1

The function of Machine Learning Exclusions is to___________.

Astop all detections for a specific pattern ID

Bstop all sensor data collection for the matching path(s)

CStop all Machine Learning Preventions but a detection will still be generated and files will still be uploaded to the CrowdStrike Cloud

Dstop all ML-based detections and preventions for the matching path(s) and/or stop files from being uploaded to the CrowdStrike Cloud

Show Suggested Answer

Suggested Answer: A

According to theCrowdStrike Falcon Data Replicator (FDR) Add-on for Splunk Guide, IOC Management allows you to manage indicators of compromise (IOCs), which are artifacts such as hashes, IP addresses, or domains that are associated with malicious activities2.You can set different actions for IOCs, such as Allow, No Action, or Always Block2.When you set a hash to Always Block through IOC Management, you are preventing that file from executing on any host in your organization by default2.This action also generates a detection alert when the file is blocked2.

by Edison at Jul 04, 2024, 08:53 PM

Limited Time Offer

25%

Off

Get Premium CCFR-201 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Donte

19 days ago

D is definitely the way to go. Wouldn't want my machine learning to go wild and start sending my private files to the cloud, that's for sure.

upvoted 0 times

...

Gerry

20 days ago

Haha, Machine Learning Exclusions - is that like a bouncer for the AI models? Gotta keep those rogue algorithms in check!

upvoted 0 times

...

Kasandra

27 days ago

A and B are too extreme - I wouldn't want to disable all detections or data collection. C seems closer, but I think D is the best choice.

upvoted 0 times

Raina

9 days ago

I think D is the best choice as well.

upvoted 0 times

...

Lilli

20 days ago

I agree, A and B are too extreme.

upvoted 0 times

...

2 months ago

I think the function of Machine Learning Exclusions is to stop all ML-based detections and preventions for the matching path(s) and/or stop files from being uploaded to the CrowdStrike Cloud.

upvoted 0 times

...