7.1 Identify Recommended Remediation Steps for Findings and Detections CCCS Practice Questions (Page 5)

Questions 21–22

1. 21foundation · easy

   A security analyst receives a CrowdStrike Falcon detection for a host that is actively communicating with a known malicious domain. Which remediation step is recommended FIRST to contain the threat?

   • ABlock the domain in the firewall
   • BDelete the malicious file
   • CRun a full scan on the host
   • DIsolate the host
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A finding shows that a host has a misconfiguration that allows unauthenticated access to a service. The host is a non-critical web server. What is the recommended remediation step?

   • AMonitor the host for unauthorized access.
   • BBlock the service port in the firewall.
   • CReconfigure the service to require authentication.
   • DIsolate the host from the network to prevent access.
   Reveal Solution Discussion Select an answer first