CCFA Exam QuestionsBrowse all questions from this exam

CCFA Exam - Question 31

You want to create a detection-only policy. How do you set this up in your policy's settings?

Enable the detection sliders and disable the prevention sliders. Then ensure that Next Gen Antivirus is enabled so it will disable Windows Defender.

Select the "Detect-Only" template. Disable hash blocking and exclusions.

You can't create a policy that detects but does not prevent. Use Custom IOA rules to detect.

Set the Next-Gen Antivirus detection settings to the desired detection level and all the prevention sliders to disabled. Do not activate any of the other blocking or malware prevention options.

Show Answer

Correct Answer: D

To create a detection-only policy, you should set the Next-Gen Antivirus detection settings to the desired detection level and disable all the prevention sliders. Additionally, it is important to not activate any other blocking or malware prevention options. This ensures that the policy will detect potential threats without taking any preventive measures against them.

Discussion

3 comments

ShuliAbbaOption: D

Jan 28, 2023

D is correct. tested on lab.

FerbOPOption: D

Apr 25, 2023

D is correct

sbag0024Option: D

Jun 14, 2023

D is correct, tested in UI