CCFA-200B: CrowdStrike Certified Falcon Administrator

By CrowdStrike · Question Mode

QuestionQ96

VerifiedRules Configuration

After enabling an IOA rule and its corresponding rule group, what additional action is required for the IOA to be fully functional?

Explanation

An enabled IOA rule group must be assigned to a prevention policy for the rule to be applied to endpoints and operate as intended.

Community Discussion

No comments yet. Be the first to start the discussion!