Exam CCFR-201 Topic 2 Question 35 Discussion

Actual exam question for CrowdStrike's CCFR-201 exam
Question #: 35
Topic #: 2
What action is used when you want to save a prevention hash for later use?

Suggested Answer: D Vote an answer

Explanation
According to the CrowdStrike Falcon Data Replicator (FDR) Add-on for Splunk Guide, the Always Block action allows you to block a file from executing on any host in your organization based on its hash value2. This action can be used to prevent known malicious files from running on your endpoints2.

by Jerry at Jun 08, 2026, 10:51 AM

Limited Time Offer

15%

Off

Get Premium CCFR-201 Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10