CrowdStrike Certified Falcon Administrator (CCFA) — Question 208

Where would you apply a configuration to allow IP addresses over which your hosts will always be allowed to communicate, even if a host is contained?

Answer options

• A. Containment Policy
• B. Maintenance Token
• C. IP Allowlist Management
• D. Response Policies

Correct answer: A

Explanation

The correct answer is A, as a Containment Policy is specifically designed to manage communication rules for isolated hosts. The other options do not focus on maintaining ongoing communication between hosts, as IP Allowlist Management pertains to IP address approvals and Response Policies relate to incident reactions.