CrowdStrike Certified Falcon Responder (CCFR) — Question 47
What do IOA exclusions help you achieve?
Answer options
- A. Reduce false positives based on Next-Gen Antivirus settings in the Prevention Policy
- B. Reduce false positives of behavioral detections from IOA based detections only
- C. Reduce false positives of behavioral detections from IOA based detections based on a file hash
- D. Reduce false positives of behavioral detections from Custom IOA and OverWatch detections only
Correct answer: B
Explanation
The correct answer, B, highlights that IOA exclusions specifically target the reduction of false positives associated with behavioral detections that utilize IOA methods. Options A, C, and D do not accurately reflect the singular focus of IOA exclusions on behavioral detections solely related to IOA, as they refer to other detection types or criteria.