CrowdStrike Certified Falcon Administrator CCFA-200 Question # 27 Topic 3 Discussion

CrowdStrike Certified Falcon Administrator CCFA-200 Question # 27 Topic 3 Discussion

CCFA-200 Exam Topic 3 Question 27 Discussion:
Question #: 27
Topic #: 3

Which of the following is an effective Custom IOA rule pattern to kill any process attempting to access www.badguydomain.com?


A.

.*badguydomain.com.*


B.

\Device\HarddiskVolume2\*.exe -SingleArgument www.badguydomain.com /kill


C.

badguydomain\.com.*


D.

Custom IOA rules cannot be created for domains


Get Premium CCFA-200 Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.