Exam CCFA All QuestionsBrowse all questions from this exam
Question 24

When configuring a specific prevention policy, the admin can align the policy to two different types of groups, Host Groups and which other?

    Correct Answer: A

    When configuring a specific prevention policy, the admin can align the policy to two different types of groups, Host Groups, and Custom IOA Rule Groups. Custom IOA Rule Groups allow administrators to define and apply specific Indicators of Attack (IOA) that help in detecting and preventing suspicious activities, making them essential in the configuration of prevention policies.

Discussion
JakeUKOption: A

The correct answer is A - Custom IOA Groups. The prevention policies page seperates each policy by Win/Mac/Linux however a specific policy can be assigned to host groups and custom IOA Groups, therefore the answer is A

diegofretescOption: A

A is correct

DarkieCopyOption: A

Prevention Policies are created based on the OS (Windows, MAC and Linux policies). Once a prevention policy is created, three options appear on top: Settings, Assigned Host Groups and Assigned Custom IOAS (tested on Crowdstrike). Therefore, Host Groups and Custom IOAS are the two different types of groups a prevention policy can be aligned to. Answer is A

sbag0024Option: A

A is correct, tested in UI

Shaheen_FalconOption: A

A is correct

FerbOPOption: A

A is correct

michalpapiOption: D

If you go to the Prevention policies tab you will see Windows/Mac/Linux policies segregation. Once you choose OS only then you can assign a host group to the specific prevention policy. Each OS has a different set of prevention policies and each prevention policy is assignable to a specific host group. The answer is D.

chaos_mobOption: A

Correct Answer is A

kgmangleOption: A

Correct Answer is A

Roy_SoOption: A

Answer is A

ShuliAbbaOption: A

Correct answer is A :)

plantvastOption: A

The two groups are Host Groups and Custom IOAs