CCFA: CrowdStrike Certified Falcon Administrator

Question

Which of the following should be used with extreme caution because it can introduce additional security risks, such as malware or other attacks, that would not be recorded, detected, or prevented according to the exclusion syntax?

Explanation

Sensor Visibility Exclusions can create blind spots by preventing the sensor from recording, detecting, or preventing activity that matches the configured exclusion. They therefore require extreme caution because malicious activity can fall within the excluded scope.

CCFA: CrowdStrike Certified Falcon Administrator

AstroTutor

Notes

Readiness

QuestionQ211

Community Discussion