CCFA Exam QuestionsBrowse all questions from this exam

CCFA Exam - Question 3


What is the purpose of a containment policy?

Show Answer
Correct Answer: CD

The purpose of a containment policy is to define allowed IP addresses over which your hosts will communicate when contained. This ensures that even when a machine is put in Network Containment, it can still communicate with specific IP addresses or IP ranges as defined by the policy.

Discussion

9 comments
Sign in to comment
ShuliAbbaOption: D
Jan 24, 2023

Verified with Falcon's documentation - D is correct.

plantvastOption: D
Jan 20, 2023

Tested on Falcon. Containment policy is only used to allow communication to specific IPs or IP ranges when a host is contained.

BelroseOption: D
Mar 25, 2023

D is correct, In the Containment Policy page have the title "Network traffic allowlist" and it only allows to add IPs or CIDR networks to exclude in the moment of the isolation of any host, because it is a global policy, not allowing make distinctions between machines.

chaos_mobOption: D
Apr 4, 2023

Checked the portal and it is D

FerbOPOption: D
Apr 25, 2023

D, Network traffic allowlist

MSKidOption: D
May 4, 2023

Yup, its D

sbag0024Option: D
Jun 14, 2023

D is correct

diegofretescOption: D
Sep 18, 2023

El D es el correcto

CyberMacadamiaOption: D
Mar 22, 2024

D is correct, can be seen in UI under Host Setup and Management > Containment Policy > Add allowlist entry