Examice

Exam CCFA All QuestionsBrowse all questions from this exam

Question 49

What impact does disabling detections on a host have on an API?

Endpoints with detections disabled will not alert on anything until detections are enabled again

Endpoints cannot have their detections disabled individually

DetectionSummaryEvent stops sending to the Streaming API for that host

Endpoints with detections disabled will not alert on anything for 24 hours (by default) or longer if that setting is changed

Correct Answer: C

Disabling detections on a host means that the DetectionSummaryEvent stops sending to the Streaming API for that host. This directly impacts the API's functionality related to detection events, as these events will no longer be communicated while detections are disabled.

Discussion

Percy73729Option: C

Confirmed with documentation. Correct answer is C

FerbOPOption: C

C is correct answer

Dr_FalconOption: C

C. DetectionSummaryEvent stops sending to the Streaming API for that host Checked at documentation

CyberMacadamiaOption: C

Answer should be C

sbag0024Option: C

C is correct, this is right out of the doc

kangaruOption: C

D has nothing to do this API