CCFA Exam QuestionsBrowse all questions from this exam

CCFA Exam - Question 120


When creating a custom IOA for a specific domain, which syntax would be best for detecting or preventing on all subdomains as well?

Show Answer
Correct Answer: A

The best syntax for detecting or preventing a specific domain and all its subdomains in this context is '.*\.baddomain\.xyz|baddomain\.xyz'. This pattern utilizes a regular expression where '.*\.' matches any subdomain and 'baddomain\.xyz' matches the domain itself. It ensures that both the main domain and any subdomains are covered, which precisely fits the requirement of the question.

Discussion

3 comments
Sign in to comment
Brian9296Option: C
Nov 28, 2023

Tested in UI

MuffenOption: A
Apr 17, 2024

Disagree with Brian. C is not specific enough and would match things like notabaddomain.xyz and baddomain.xyz.com A is the best solution for specifically looking for subdomains of baddomain.xyz or just the domain itself which is what the question asked for.

p3n3tr4t0rOption: C
Jul 16, 2024

C is correct. Checked on training