CrowdStrike Certified Falcon Administrator (CCFA) — Question 207

Which ML exclusion pattern would be the most accurate for all .exe binaries in "C:\Program Files\Software\", including any subfolders of Software?

Answer options

• A. Program Files\Software\*.exe
• B. **\*.exe
• C. Program Files\Software\**.exe
• D. Program Files\Software\**\*..exe

Correct answer: C

Explanation

Option C is correct because it specifically targets all .exe files within the 'Software' directory and any of its subdirectories. Option A only matches .exe files directly in the 'Software' folder but not in subfolders. Option B is too broad and would match .exe files anywhere on the system, not just within the specified path. Option D contains an incorrect pattern with '*..exe' which does not conform to the expected file naming conventions.