Exam CCFR-201 All QuestionsBrowse all questions from this exam
Question 60

Which option indicates a hash is allowlisted?

    Correct Answer: B

    To indicate that a hash is allowlisted, the correct option is 'Allow'. When a hash is marked as 'Allow', it explicitly permits the hash to run or perform its intended actions on the system. This action ensures that the hash is included in the allowlist, indicating that it is trusted and should not be blocked.

Discussion
alanalanalanOption: B

Answer is B, Allow Checked the IOC management UI, the "action" only have four types : Block, Detect Only, Allow and Block + hide detection.

silva222222Option: B

The option that indicates a hash is allowlisted is: B. Allow When a hash is allowlisted, it means that it is explicitly permitted and allowed to run or perform its intended actions on the system. Therefore, selecting "Allow" indicates that the hash is included in the allowlist.

kangaruOption: B

Use allow to add hash to allowlist. IoC Management only supports allowlisting in Hash. To apply for IP and Domains, use IoA Rules.

sbag0024Option: A

The correct answer is A. No Action, Never block, Always Block, and Remove Hashes are the only options.

wildbandanaOption: B

checked in docs

sbag0024

wrong you did not check at all bc no where in the UI is an "allow" an option

kangaru

This time he's right lol. There is 'allow' in IoC Hash

wildbandanaOption: B

B checked in docs

sbag0024

WRONG! GTFO