What happens when a hash is set to Always Block through IOC Management?
What happens when a hash is set to Always Block through IOC Management?
When a hash is set to Always Block through IOC Management, execution is prevented on selected host groups. This approach allows administrators to target specific segments of their network, ensuring that the block only applies to relevant hosts, thereby providing more granular control over the environment.
pay attention to proposed answer
I feel like you are someone who works for other sites that want people to fail and pay for another practice exam on your site. That or this is an inside job which should have a legal action taken.
I believe the answer is B. "All hosts" is NOT selected by default, but is an available option.
B is the correct answer. It is by selected host groups
You have options to choose whether to apply IoC rule to All hosts or Specific Host Groups.
Answer is B , B. Execution is prevented on selected host groups Falcon policy is using "group" concept to control