CCFA-200B: CrowdStrike Certified Falcon AdministratorDemo

By CrowdStrike · Question Mode

QuestionQ78

Policy Application

Which prevention-policy settings need to be enabled to quarantine files on the host?

  • A Quarantine Files -Windows Anti-Malware Execution Blocking
  • B Malware Protection -Custom Execution Blocking
  • C Next-Gen Antivirus Prevention slidersQuarantine & Security Center Registration
  • D Advanced Remediation Actions -Quarantine level set to Aggressive
Explanation

CrowdStrike Falcon quarantines executable files after Next-Gen Antivirus (NGAV) prevents them when Quarantine & Security Center Registration is enabled. NGAV prevention sliders must therefore be enabled along with that quarantine setting.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!