CCFA: CrowdStrike Certified Falcon Administrator

By CrowdStrike · Question Mode

QuestionQ103

VerifiedHost Management and Setup

Where would you configure IP addresses that hosts will always be permitted to communicate over, even when a host is contained?

Explanation

A Containment Policy defines network-containment behavior and can allowlist trusted IP addresses so a contained host can continue communicating with those addresses. CrowdStrike’s Falcon administrator course material includes configuring appropriate IP allowlists while the network is under containment as part of containment-policy administration.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!