CCFA: CrowdStrike Certified Falcon Administrator

By CrowdStrike · Question Mode

QuestionQ84

VerifiedPolicy Application

Which critical prevention-policy setting stops sensor-related files, folders, and registry objects from being renamed or deleted?

Explanation

CrowdStrike Falcon's Sensor Tampering Protection blocks attempts to tamper with the sensor, including renaming or deleting sensor-related files, folders, and registry objects.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!