Exam CCFA-200b Topic 5 Question 23 Discussion

Actual exam question for CrowdStrike's CCFA-200b exam
Question #: 23
Topic #: 5
When would the No Action option be assigned to a hash in IOC Management?

Suggested Answer: A Vote an answer

The No Action option can be assigned to a hash in IOC Management when you want to save the indicator for later action, but do not want to block or allow it at this time. This option will neither detect nor prevent the execution of the hash, but will keep it in the IOC list for future reference.
The other options are either incorrect or not related to the No Action option.

by Vincent at Aug 12, 2026, 03:52 AM

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

0
0
0
10