QuestionQ33

Runtime Protection

A new runtime detection and prevention policy must be assigned to a large number of hosts. The policy will be used for production systems, and the included hosts will change over time. Management of the associated host group must be as efficient as possible. Hosts that have multiple prevention policies assigned must use this policy as their active prevention policy.

Which host group type should be used to implement the policy, and what should the policy precedence be set to?

  • A Static by host ID host group -Precedence 1
  • B Dynamic host group -Precedence 5
  • C Static by host ID host group -Precedence 5
  • D Dynamic host group -Precedence 1
Explanation

A dynamic host group automatically maintains membership as production hosts change, minimizing administrative work. A prevention policy at precedence 1 has the highest priority, so it is the active policy when more than one prevention policy could apply to a host.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!