← Back to exam page

Free CCFA – Crowdstrike CCFA Practice Test Question

Free demo downloads

Loading demo links...

Showing 1–3 of 24 questions

Question 1 (Topic 1)

You have determined that you have numerous Machine Learning detections in your environment that are false positives. They are caused by a single binary that was custom written by a vendor for you and that binary is running on many endpoints. What is the best way to prevent these in the future?

Select an option, then click Submit answer.

  • ○ Contact support and request that they modify the Machine Learning settings to no longer include this detection
  • ○ Using IOC Management, add the hash of the binary in question and set the action to "Allow"
  • ○ Using IOC Management, add the hash of the binary in question and set the action to "Block, hide detection"
  • ○ Using IOC Management, add the hash of the binary in question and set the action to "No Action"
Question 2 (Topic 1)

When configuring a specific prevention policy, the admin can align the policy to two different types of groups, Host Groups and which other?

Select an option, then click Submit answer.

  • ○ Custom IOA Rule Groups
  • ○ Custom IOC Groups
  • ○ Enterprise Groups
  • ○ Operating System Groups
Question 3 (Topic 1)

How do you assign a policy to a specific group of hosts?

Select an option, then click Submit answer.

  • ○ Create a group containing the desired hosts using "Static Assignment." Go to the Assigned Host Groups tab of the desired policy and dick "Add groups to policy." Select the desired Group(s).
  • ○ Assign a tag to the desired hosts in Host Management. Create a group with an assignment rule based on that tag. Go to the Assignment tab of the desired policy and click "Add Groups to Policy." Select the desired Group(s).
  • ○ Create a group containing the desired hosts using "Dynamic Assignment." Go to the Assigned Host Groups tab of the desired policy and select criteria such as OU, OS, Hostname pattern, etc.
  • ○ On the Assignment tab of the desired policy, select "Static" assignment. From the next window, select the desired hosts (using fitters if needed) and click Add.