CCFA: CrowdStrike Certified Falcon Administrator

By CrowdStrike · Question Mode

QuestionQ41

VerifiedSensor Deployment

When deploying the Falcon Sensor alongside an existing security solution, you enable Falcon’s Quarantine prevention setting. What configuration is recommended for both solutions?

Explanation

Falcon Quarantine acts on executable files that NGAV has prevented. The recommended configuration is to disable or remove any other antivirus solution and set NGAV Sensor Machine Learning prevention to Moderate or higher, avoiding conflicts from co-resident AV protection while providing the required prevention threshold for quarantine.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!