Online Access Free CCFA-200b Practice Test

Where can you find hosts that have been offline for ten minutes or longer?

• A.Sensor Coverage Dashboard
• B.Host Management
• C.Host Groups

What are the two automated triggers that cause a Fusion SOAR workflow to run?

• A.Event and scheduled triggers
• B.Incident and detections triggers
• C.Condition and action triggers
• D.Event and action triggers

To test a new Falcon sensor version, you have created a new sensor update policy and two separate dynamic host groups. One group contains all test Windows servers. The other group contains all of your Windows servers. The new policy was applied to only the test Windows servers host group. What is required to safely and successfully test your new sensor update policy on only your test Windows servers?

• A.The new Falcon sensor version should be manually installed by you on every test Windows server before ever enabling and assigning the new policy
• B.The new policy must be enabled and assigned a precedence that is lower when compared to the policy assigned to all Windows servers
• C.The new policy must be enabled and assigned a precedence that is higher when compared to the policy assigned to all Windows servers
• D.The new Falcon sensor version should be manually uninstalled by you on every test Windows server before ever enabling and assigning the new policy

What prevention policy settings must be enabled to quarantine files on the host?

• A.Malware Protection; Custom Execution Blocking
• B.Next-Gen Antivirus Prevention sliders; Quarantine & Security Center Registration
• C.Advanced Remediation Actions; Quarantine level set to Aggressive
• D.Quarantine Files; Windows Anti-Malware Execution Blocking

An inactive host that does not contact the Falcon cloud will be automatically removed from the Host Management and Trash pages after how many days?

• A.60 Days
• B.90 Days
• C.45 Days
• D.75 Days