CrowdStrike Certified Falcon Responder (CCFR) — Question 17

What action is used when you want to save a prevention hash for later use?

Answer options

• A. Always Block
• B. Never Block
• C. Always Allow
• D. No Action

Correct answer: D

Explanation

The correct choice, 'No Action', allows for the saving of a prevention hash without enforcing any immediate restrictions. The other options imply active blocking or allowing actions, which do not pertain to just saving the hash.