CrowdStrike Certified Falcon Administrator (CCFA) — Question 113

Which of the following policies allowlist network traffic even while a host is Network Contained?

Answer options

• A. Firewall Policy
• B. IP Allowlist Policy
• C. Response Policy
• D. Containment Policy

Correct answer: D

Explanation

The Containment Policy is specifically designed to allowlist network traffic when a host is in a contained state. In contrast, the Firewall Policy is focused on blocking or permitting traffic based on rules, the IP Allowlist Policy manages specific IP addresses, and the Response Policy deals with incident responses rather than controlling network flow in a containment scenario.