Examice

Exam CCFA All QuestionsBrowse all questions from this exam

Question 124

What best describes what happens to detections in the console after clicking "Disable Detections" for a host from within the Host Management page?

Preventions will be disabled for the host

You cannot disable detections for a host

The detections for the host are removed from the console immediately and no new detections will display in the console going forward

Existing detections for the host remain, but no new detections will display in the console going forward

Correct Answer: C

When detections are disabled for a host from within the Host Management page, the detections for the host are removed from the console immediately, and no new detections will display in the console going forward.

Discussion

Brian9296Option: C

Below is the pop up when u click on "Disable Detection": You are about to disable detections for XXXXXXXXX. By doing so, detections will stop being generated on this host and all existing detections for this host will be removed from the Falcon Host UI. This data cannot be restored to the UI later, even if you re-enable detections on this host. Are you sure you want to disable detections for XXXXXXXXXXX?

juliusibOption: C

C is correct

crowdstrikerzOption: C

C is correct

juliusibOption: C

C is correct

Lucas_LOption: C

C correct, existing detections gone too