CCFA-200 無料問題集「CrowdStrike Certified Falcon Administrator」

（A）When setting up API keys

（B）When performing a Host Search

（C）When adding a user to the Falcon console under the Users application

（D）When performing the sensor installation process

（A）After disabling detections, the host will operate in Reduced Functionality Mode (RFM) until detections are enabled

（B）The detections for that host are removed from the console immediately. No new detections will display in the console going forward unless detections are enabled

（C）After disabling detections, the data for all existing detections prior to disabling detections is removed from the Event Search

（D）The DetectionSummaryEvent continues being sent to the Streaming API for that host

（A）Prevents the sensor from entering Reduced Functionality Mode

（B）Prevents modification of sensor update policy

（C）Prevents automatic updates of the sensor

（D）Prevents unauthorized uninstallation of the sensor

（A）Maintenance Tokens

（B）Sensor Update Throttling

（C）Channel File Update Throttling

（D）Sensor Update Policy

（A）.*badguydomain.com.*

（B）badguydomain\.com.*

（C）\Device\HarddiskVolume2\*.exe -SingleArgument www.badguydomain.com /kill

（D）Custom IOA rules cannot be created for domains

（A）Execution Blocking

（B）Sensor Anti-Malware

（C）Adware & PUP

（D）Advanced Machine Learning

（A）Additional User Mode Data

（B）Interpreter-Only

（C）Engine (Full Visibility)

（D）Script-based Execution Monitoring

（A）The exclusion pattern cannot be changed

（B）Only the selected groups and hosts to which the exclusion is applied can be changed

（C）All parts of the exclusion can be changed

（D）Only the options to "Detect/Block" and/or "File Extraction" can be changed

（A）Add the indicator to your allowlist and do not detect it

（B）There is no such option as No Action available in the Falcon console

（C）Add the indicator to your blocklist and show it as a detection

（D）When you want to save the indicator for later action, but do not want to block or allow it at this time

（A）*\*

（B）\Program Files\My Program\My Files\*

（C）\Program Files\My Program\*

（D）*\Program Files\My Program\*\