Examice

Exam CCFA All QuestionsBrowse all questions from this exam

Question 31

You want to create a detection-only policy. How do you set this up in your policy's settings?

Enable the detection sliders and disable the prevention sliders. Then ensure that Next Gen Antivirus is enabled so it will disable Windows Defender.

Select the "Detect-Only" template. Disable hash blocking and exclusions.

You can't create a policy that detects but does not prevent. Use Custom IOA rules to detect.

Set the Next-Gen Antivirus detection settings to the desired detection level and all the prevention sliders to disabled. Do not activate any of the other blocking or malware prevention options.

Correct Answer: D

To create a detection-only policy, you should set the Next-Gen Antivirus detection settings to the desired detection level and disable all the prevention sliders. Additionally, it is important to not activate any other blocking or malware prevention options. This ensures that the policy will detect potential threats without taking any preventive measures against them.

Discussion

ShuliAbbaOption: D

D is correct. tested on lab.

sbag0024Option: D

D is correct, tested in UI

FerbOPOption: D

D is correct