QuestionQ76

Policy Application

You want to add another layer of security for high-risk Real Time Response (RTR) commands in your environment.

Where in the UI do you configure MFA for RTR?

  • A General settings
  • B Notifications
  • C Response policies
  • D Containment policy
Explanation

Falcon configures MFA reauthentication for high-risk Real Time Response actions through General settings. Response policies govern RTR command availability, while notification and containment policies do not control RTR MFA.

Community Discussion

No comments yet. Be the first to start the discussion!