CCFA: CrowdStrike Certified Falcon Administrator

By CrowdStrike · Question Mode

QuestionQ82

VerifiedPolicy Application

When setting up a particular prevention policy, an administrator can associate the policy with two group types: Host Groups and which other type?

Explanation

CrowdStrike Falcon prevention policies can be associated with Host Groups to determine the hosts receiving the policy and with Custom IOA Rule Groups to apply custom behavioral prevention rules. Operating system selection defines the policy platform, while custom IOCs are managed through a separate mechanism.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!