CrowdStrike Certified Falcon Administrator (CCFA) — Question 232

What would be the most appropriate action to take if you wanted to prevent a folder from being uploaded to the cloud without disabling uploads globally?

Answer options

• A. A Sensor Visibility exclusion
• B. An IOA exclusion
• C. Custom IOC entry
• D. A Machine Learning exclusion

Correct answer: D

Explanation

The correct answer is D because a Machine Learning exclusion can intelligently identify and prevent the upload of specific folders based on learned patterns. The other options do not specifically address folder-level exclusions and may not be effective in controlling cloud upload behavior without impacting other functionalities.