CCFA-200B: CrowdStrike Certified Falcon Administrator

By CrowdStrike · Question Mode

QuestionQ50

VerifiedRules Configuration

Where would you configure the IP addresses that hosts will always be permitted to communicate with, even when a host is contained?

Explanation

A Containment Policy defines the network-traffic allowlist used during host containment. Its permitted IP addresses remain reachable while the host’s other network communication is restricted. CrowdStrike’s Hosts API documentation likewise describes containment as allowing CrowdStrike cloud communication and IPs specified in the containment policy.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!