CCFA-200B: CrowdStrike Certified Falcon AdministratorDemo

By CrowdStrike · Question Mode

QuestionQ96

Rules Configuration

After enabling an IOA rule and its corresponding rule group, what additional action is required for the IOA to be fully functional?

  • A The rule must be manually triggered
  • B Hosts must be individually selected to apply the rule
  • C The rule group must be assigned to a prevention policy
Explanation

An enabled IOA rule group must be assigned to a prevention policy for the rule to be applied to endpoints and operate as intended.

Community Discussion

No comments yet. Be the first to start the discussion!