CCFA: CrowdStrike Certified Falcon Administrator

Question

One of your development teams is developing code for a new enterprise application, but Falcon continually flags its execution as a detection during testing. All development work is required to be stored on a file share in a folder called devcode. Which setting can you use to reduce false positives for this file path?

Explanation

Machine Learning Exclusions allow a specified file path, such as the devcode development share, to be excluded from Falcon machine-learning detection activity, reducing false positives for trusted development code.

CCFA: CrowdStrike Certified Falcon Administrator

AstroTutor

Notes

Readiness

QuestionQ13

Community Discussion