CCFR Practice Questions - CrowdStrike Certified Falcon Responder (CCFR) Exam

Access More Questions

A Falcon Responder needs to immediately stop a compromised Windows host from communicating with attacker infrastructure while preserving the sensor's connection to the Falcon cloud. Which action should they take from the Host Management page?

Uninstall the sensor Place the host in Network Containment Disable Detection policy Reset the host's CID

Correct Answer:

Place the host in Network Containment

Access more questions from this quiz

Continue to CCFR Practice Questions - CrowdStrike Certified Falcon Responder (CCFR) Exam for more practice questions and the full quiz experience.

Access More Questions