CCFA-200B: CrowdStrike Certified Falcon AdministratorDemo

By CrowdStrike · Question Mode

QuestionQ90

Policy Application

Why would you include IP addresses in a containment policy?

  • A A new group of analysts need to be able to place hosts under Network Containment
  • B Your organization has additional IP addresses that need to be able to access the Falcon console
  • C Your organization has resources that need to be accessible when hosts are network contained
  • D You want to automate the Network Containment process based on the IP address of a host
Explanation

IP addresses are added to a containment policy to allow network-contained hosts to retain access to required resources at those addresses.

Community Discussion

No comments yet. Be the first to start the discussion!