CCFA-200B: CrowdStrike Certified Falcon Administrator

By CrowdStrike · Question Mode

QuestionQ62

VerifiedHost Management and Setup

A host has been network-contained with Falcon, and you have been asked to update its operating system with zero-day patches. You tried using your patch-update systems for this task, but their jobs fail.

Which Falcon UI configuration steps will allow these activities?

Explanation

A Falcon Containment Policy can allowlist the specific IP addresses of patch-management tools so a network-contained host can communicate with those systems while containment remains active. FQDN allowlisting is not the containment exception mechanism, and a Firewall Policy does not supersede Network Containment.

Community Discussion

No comments yet. Be the first to start the discussion!