QuestionQ28

Runtime Protection

Which Image Assessment exclusion type lets you exclude indefinitely or exclude for a limited time after a finding is detected?

  • A Suspicious hash
  • B Malware hash
  • C Vulnerability ID
  • D Packages
Explanation

A Vulnerability ID exclusion targets a specific vulnerability finding and can use a time-to-live (TTL) value, which supports either an indefinite exclusion or one that expires after a limited period. CrowdStrike’s Image Assessment Policy Exclusions API defines exclusion conditions with a ttl field.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!