CrowdStrike Certified Falcon Administrator (CCFA) — Question 86

When the Notify End Users policy setting is turned on, which of the following is TRUE?

Answer options

• A. End users will not be notified as we would not want to notify a malicious actor of a detection. This setting does not exist
• B. End users will be immediately notified via a pop-up that their machine is in-network isolation
• C. End-users receive a pop-up notification when a prevention action occurs
• D. End users will receive a pop-up allowing them to confirm or refuse a pending quarantine

Correct answer: C

Explanation

The correct answer is C because when a prevention action is executed, users are informed through a pop-up notification. Options A and B are incorrect as they misrepresent the behavior of the policy, while D refers to a different function related to quarantine confirmation.