CrowdStrike Certified Falcon Administrator (CCFA) — Question 3

What is the function of a single asterisk (*) in an ML exclusion pattern?

Answer options

• A. The single asterisk will match any number of characters, including none. It does include separator characters, such as \ or /, which separate portions of a file path
• B. The single asterisk will match any number of characters, including none. It does not include separator characters, such as \ or /, which separate portions of a file path
• C. The single asterisk is the insertion point for the variable list that follows the path
• D. The single asterisk is only used to start an expression, and it represents the drive letter

Correct answer: B

Explanation

The correct answer is B because the single asterisk matches any number of characters but does not account for separators like \, which are used in file paths. Option A is incorrect as it states that it includes separator characters, while options C and D describe functions that are not associated with the asterisk in this context.