CCFA: CrowdStrike Certified Falcon Administrator

By CrowdStrike · Question Mode

QuestionQ204

VerifiedPolicy Application

You are starting the Falcon Sensor rollout for the first time alongside your current security solution. During the testing phase, you must configure the Prevention Policy Machine Learning levels so that it does not interfere with the existing solutions. Which settings should you select?

Explanation

A Cautious setting for both machine-learning detection and prevention provides a low-disruption coexistence posture: it limits actions to high-confidence malicious activity while reducing false positives that could conflict with an existing security product. Falcon prevention-policy documentation distinguishes the detection and prevention machine-learning levels and identifies them as the controls for sensor- and cloud-based anti-malware behavior.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!