CrowdStrike Certified Falcon Responder (CCFR) — Question 55

What happens when a quarantined file is released?

Answer options

• A. It is moved into the C:\CrowdStrike\Quarantine\Released folder on the host
• B. It is allowed to execute on the host
• C. It is deleted
• D. It is allowed to execute on all hosts

Correct answer: B

Explanation

The correct answer is B because releasing a quarantined file allows it to run on the host again, indicating that it is no longer considered a threat. Options A, C, and D are incorrect because they either suggest moving or deleting the file, or applying the release action to all hosts, which does not occur in this scenario.