CCFA: CrowdStrike Certified Falcon Administrator

By CrowdStrike · Question Mode

QuestionQ48

VerifiedHost Management and Setup

After network-containing a host, your Incident Response team reports that it cannot remotely connect to the host. Which of the following must be configured to permit remote connections from specified IPs?

Explanation

A Containment Policy defines the network-traffic exceptions for a network-contained host. Adding the authorized remote-management IP addresses to its allowlist permits those specified sources to connect while the host remains contained. CrowdStrike states that a network-contained system can connect to CrowdStrike cloud infrastructure and to local IPs specified by an administrator.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!