CCFA-200B: CrowdStrike Certified Falcon Administrator

By CrowdStrike · Question Mode

QuestionQ107

VerifiedPolicy Application

Which prevention-policy setting stops sensor-related files, folders, and registry objects from being renamed or deleted?

Explanation

Sensor Tampering Protection blocks attempts to tamper with the Falcon sensor, including renaming or deleting its related files, folders, and registry objects.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!