CrowdStrike IDP Exam - Topic 7 Question 4 Discussion

Actual exam question for CrowdStrike's IDP exam

Question #: 4
Topic #: 7

[All IDP Questions]

Which of the following demonstrates a detection is enabled?

AThe toggle next to the Detection Enabled is marked in gray

BThe toggle next to the Detection Enabled is marked in green

CThe detection has a Disabled tag next to it

DThe detection has an Enabled tag next to it

Show Suggested Answer

Suggested Answer: B

In Falcon Identity Protection, detection status is visually indicated using a toggle control within the detection configuration interface. According to the CCIS documentation, when a detection is enabled, the toggle next to Detection Enabled is displayed in green.

A green toggle indicates that the detection logic is active and that Falcon will generate detections when the defined conditions are met. When the toggle is gray, the detection is disabled and will not generate alerts or contribute to incident formation.

Falcon does not rely on textual ''Enabled'' or ''Disabled'' tags to indicate detection status. Instead, the toggle color provides a clear, immediate visual indicator to administrators.

Because a green toggle explicitly represents an enabled detection, Option B is the correct and verified answer.

by Rachael at Jan 27, 2026, 11:15 AM

Limited Time Offer

25%

Off

Get Premium IDP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Ellsworth

4 days ago

B) The toggle next to the Detection Enabled is Ellsworthed in green. Duh, it's the only one that makes sense.

upvoted 0 times

...

Dan

9 days ago

Hmm, I'm torn between B and D. Guess I'll just flip a coin.

upvoted 0 times

...

Marge

14 days ago

I'm going with B. Anything else would be too easy.

upvoted 0 times

...

Ulysses

20 days ago

The toggle should be green, not gray. That's just common sense.

upvoted 0 times

...

Natalie

25 days ago

D) The detection has an Enabled tag next to it.

upvoted 0 times

...

Meaghan

30 days ago

B) The toggle next to the Detection Enabled is marked in green.

upvoted 0 times

...

Tony

1 month ago

I feel like the green toggle is definitely the right answer, but I should double-check my notes on this.

upvoted 0 times

...

Stanford

1 month ago

I’m a bit confused; I thought gray meant it was off, but I can’t recall clearly.

upvoted 0 times

...

Lezlie

2 months ago

I remember a practice question where the enabled state was indicated by a tag, so maybe D is correct?

upvoted 0 times

...

Lachelle

2 months ago

I think the green toggle means detection is enabled, but I’m not completely sure.

upvoted 0 times

...

Mitsue

2 months ago

Hmm, I'm torn between B and D. They both seem to indicate that detection is enabled, but the wording is a bit different. I'll have to think this through carefully.

upvoted 0 times

...

Milly

3 months ago

B) The toggle next to the Detection Enabled is marked in green - that's gotta be the right answer. The question is asking for the indicator that detection is enabled, and green is the typical color for an active/enabled state.

upvoted 0 times

...

Oretha

3 months ago

I'm a little unsure about this one. I want to make sure I understand the difference between the visual indicators for enabled vs. disabled. Let me re-read the question closely.

upvoted 0 times

...

Trinidad

3 months ago

Okay, this one seems straightforward. I just need to identify which option shows that detection is actually enabled, not just the label or a tag.

upvoted 0 times

...

Tiera

3 months ago

Hmm, I think the key here is to look for the visual indicator that detection is enabled. I'll scan the options carefully to see which one matches that.

upvoted 0 times

...