Exam CCFA All QuestionsBrowse all questions from this exam
Question 120

When creating a custom IOA for a specific domain, which syntax would be best for detecting or preventing on all subdomains as well?

    Correct Answer: A

    The best syntax for detecting or preventing a specific domain and all its subdomains in this context is '.*\.baddomain\.xyz|baddomain\.xyz'. This pattern utilizes a regular expression where '.*\.' matches any subdomain and 'baddomain\.xyz' matches the domain itself. It ensures that both the main domain and any subdomains are covered, which precisely fits the requirement of the question.

Discussion
MuffenOption: A

Disagree with Brian. C is not specific enough and would match things like notabaddomain.xyz and baddomain.xyz.com A is the best solution for specifically looking for subdomains of baddomain.xyz or just the domain itself which is what the question asked for.

Brian9296Option: C

Tested in UI

p3n3tr4t0rOption: C

C is correct. Checked on training