QuestionQ77Verified/Host Management and SetupCopy linkReport a problemAsk AstroTutorSave questionWhich of the following statements is TRUE about disabling detections for a host?AThe DetectionSummaryEvent continues being sent to the Streaming API for that hostBAfter disabling detections, the host will operate in Reduced Functionality Mode (RFM) until detections are enabledCThe detections for that host are removed from the console immediately. No new detections will display in the console going forward unless detections are enabledDAfter disabling detections, the data for all existing detections prior to disabling detections is removed from the Event SearchShow AnswerAnswerExplanationDisabling detections suppresses the host’s existing detections from the Falcon console immediately and prevents new detections for that host from appearing there until detections are re-enabled. The sensor and its protection capabilities are not placed into Reduced Functionality Mode, and historical Event Search data is not deleted.Show comments1Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion