CrowdStrike Certified Falcon Administrator (CCFA) — Question 57

When creating new IOCs in IOC management, which of the following fields must be configured?

Answer options

• A. Hash, Description, Filename
• B. Hash, Action and Expiry Date
• C. Filename, Severity and Expiry Date
• D. Hash, Platform and Action

Correct answer: D

Explanation

The correct answer is D, as Hash, Platform, and Action are essential fields that need to be set when creating new IOCs to ensure they function correctly within IOC management. The other options either include non-essential fields or omit necessary ones required for effective IOC configuration.