Exam CCFA All QuestionsBrowse all questions from this exam
Question 3

What is the purpose of a containment policy?

    Correct Answer: D

    The purpose of a containment policy is to define allowed IP addresses over which your hosts will communicate when contained. This ensures that even when a machine is put in Network Containment, it can still communicate with specific IP addresses or IP ranges as defined by the policy.

Discussion
ShuliAbbaOption: D

Verified with Falcon's documentation - D is correct.

sbag0024Option: D

D is correct

MSKidOption: D

Yup, its D

FerbOPOption: D

D, Network traffic allowlist

chaos_mobOption: D

Checked the portal and it is D

BelroseOption: D

D is correct, In the Containment Policy page have the title "Network traffic allowlist" and it only allows to add IPs or CIDR networks to exclude in the moment of the isolation of any host, because it is a global policy, not allowing make distinctions between machines.

plantvastOption: D

Tested on Falcon. Containment policy is only used to allow communication to specific IPs or IP ranges when a host is contained.

CyberMacadamiaOption: D

D is correct, can be seen in UI under Host Setup and Management > Containment Policy > Add allowlist entry

diegofretescOption: D

El D es el correcto