Free Access CrowdStrike.CCFA-200.v2024-01-08.q82 Practice Test (Page 16)

Question 71

Which of the following is TRUE regarding disabling detections for a host?

A.After disabling detections, the host will operate in Reduced Functionality Mode (RFM) until detections are enabled

B.After disabling detections, the data for all existing detections prior to disabling detections is removed from the Event Search

C.The DetectionSummaryEvent continues being sent to the Streaming API for that host

D.The detections for that host are removed from the console immediately. No new detections will display in the console going forward unless detections are enabled

Question 72

You are attempting to install the Falcon sensor on a host with a slow Internet connection and the installation fails after 20 minutes. Which of the following parameters can be used to override the 20 minute default provisioning window?

A.ProvNoWait=1

B.Timeout=30

C.Timeout=0

D.ExtendedWindow=1

Question 73

You have determined that you have numerous Machine Learning detections in your environment that are false positives. They are caused by a single binary that was custom written by a vendor for you and that binary is running on many endpoints. What is the best way to prevent these in the future?

A.Using IOC Management, add the hash of the binary in question and set the action to "No Action"

B.Using IOC Management, add the hash of the binary in question and set the action to "Block, hide detection"

C.Contact support and request that they modify the Machine Learning settings to no longer include this detection

D.Using IOC Management, add the hash of the binary in question and set the action to "Allow"

Question 74

What is the purpose of precedence with respect to the Sensor Update policy?

A.Precedence applies to the Prevention policy and not to the Sensor Update policy

B.Hosts assigned to multiple policies will assume the highest ranked policy in the list (policy with the lowest number)

C.Hosts assigned to multiple policies will assume the lowest ranked policy in the list (policy with the highest number)

D.Precedence ensures that conflicting policy settings are not set in the same policy

Question 75

Which of the following applies to Custom Blocking Prevention Policy settings?

A.Hashes must be entered on the Prevention Hashes page before they can be blocked via this policy

B.Blocklisting applies to hashes, IP addresses, and domains

C.Executions blocked via hash blocklist may have partially executed prior to hash calculation process remediation may be necessary

D.You can only blocklist hashes via the API

Other Version: 1251CrowdStrike.CCFA-200.v2025-04-26.q88; 841CrowdStrike.CCFA-200.v2023-06-29.q35; 790CrowdStrike.CCFA-200.v2023-04-27.q33; 899CrowdStrike.CCFA-200.v2023-01-14.q33

Latest Upload: 200PaloAltoNetworks.NGFW-Engineer.v2026-05-01.q43; 291Nokia.4A0-113.v2026-05-01.q69; 250EC-COUNCIL.312-49v11.v2026-04-30.q214; 227Microsoft.MB-820.v2026-04-30.q101; 205Salesforce.MC-202.v2026-04-30.q57; 203BICSI.INSTC_V8.v2026-04-29.q53; 332NMLS.MLO.v2026-04-28.q82; 241NCARB.Project-Management.v2026-04-28.q27; 454EMC.D-AV-DY-23.v2026-04-27.q184; 1107ServiceNow.CSA.v2026-04-27.q483

Question 71

Question 72

Question 73

Question 74

Question 75

Download PDF File