CrowdStrike Certified Falcon Administrator (CCFA) — Question 105

What best describes what happens to detections in the console after clicking "Disable Detections" for a host from within the Host Management page?

Answer options

• A. Preventions will be disabled for the host
• B. You cannot disable detections for a host
• C. The detections for the host are removed from the console immediately and no new detections will display in the console going forward
• D. Existing detections for the host remain, but no new detections will display in the console going forward

Correct answer: C

Explanation

The correct answer, C, is accurate because disabling detections removes them from the console immediately and prevents any new detections from being displayed. Option A is incorrect since it refers to preventions, not detections. Option B is incorrect because it is indeed possible to disable detections. Option D is wrong because it suggests that existing detections remain visible, which contradicts the action of disabling detections.