CrowdStrike Exam CCFR-201 Topic 3 Question 23 Discussion

Actual exam question for CrowdStrike's CCFR-201 exam

Question #: 23
Topic #: 3

[All CCFR-201 Questions]

What happens when a quarantined file is released?

AIt is moved into the C:\CrowdStrike\Quarantine\Released folder on the host

BIt is allowed to execute on the host

CIt is deleted

DIt is allowed to execute on all hosts

Show Suggested Answer

Suggested Answer: D

According to theCrowdStrike Falcon Data Replicator (FDR) Add-on for Splunk Guide, when you release a file from quarantine, you are restoring it to its original location and allowing it to execute on any host in your organization1.This action also removes the file from the quarantine list and deletes it from the CrowdStrike Cloud1.

by Shawna at Sep 17, 2024, 06:31 PM

Limited Time Offer

25%

Off

Get Premium CCFR-201 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Rene

1 months ago

I don't know about you, but I'm always looking for more ways to delete things. Option C for the win!

upvoted 0 times

Garry

7 days ago

Option D seems too risky, allowing it to execute on all hosts could spread the threat.

upvoted 0 times

...

Georgeanna

16 days ago

I agree with you, option C is the safest choice to delete the file.

upvoted 0 times

...

Bobbie

17 days ago

I think option B is risky, allowing it to execute could cause harm.

upvoted 0 times

...

Verona

29 days ago

I prefer option A, moving it to the released folder seems safer.

upvoted 0 times

...

Lawanda

1 months ago

Hmm, 'It is allowed to execute on the host'? What is this, a horror movie? Hard pass on that one!

upvoted 0 times

...

Wade

2 months ago

I bet the answer is 'It is deleted'. Quarantined files are bad news, so might as well get rid of them for good.

upvoted 0 times

Kallie

11 days ago

I'm pretty sure it's 'It is allowed to execute on all hosts'.

upvoted 0 times

...

Marylou

15 days ago

Actually, I think it's 'It is deleted'. Quarantined files are dangerous.

upvoted 0 times

...

Louis

16 days ago

No, I believe it is 'It is allowed to execute on the host'.

upvoted 0 times

...

Huey

1 months ago

I think the answer is 'It is moved into the C:\\CrowdStrike\\Quarantine\\Released folder on the host'.

upvoted 0 times

...

Tesha

2 months ago

Ah, the classic 'move it to a special folder' approach. Gotta love the attention to detail on that one.

upvoted 0 times

...

Tuyet

2 months ago

C'mon, who would ever choose 'It is allowed to execute on all hosts'? That's just asking for trouble!

upvoted 0 times

Tracey

26 days ago

C) It is deleted

upvoted 0 times

...

Theron

1 months ago

B) It is allowed to execute on the host

upvoted 0 times

...

Pamella

1 months ago

A) It is moved into the C:\\CrowdStrike\\Quarantine\\Released folder on the host

upvoted 0 times

...

Jina

2 months ago

Option B? Seriously? I don't want any quarantined files executing on my machine, no matter what!

upvoted 0 times

...

Elfrieda

2 months ago

Wait, so we can just unleash quarantined files onto the whole network? That seems like a terrible idea!

upvoted 0 times

...

Verdell

2 months ago

I'm going with option C - deleting it. Better safe than sorry when it comes to potential malware.

upvoted 0 times

...

Myra

2 months ago

If it's in quarantine, I'd rather it just stays there, you know? Out of sight, out of mind.

upvoted 0 times

Chantell

25 days ago

C) It is deleted

upvoted 0 times

...

Sharika

26 days ago

B) It is allowed to execute on the host

upvoted 0 times

...

Charlena

28 days ago

A) It is moved into the C:\\CrowdStrike\\Quarantine\\Released folder on the host

upvoted 0 times

...

Loreen

1 months ago

Oh, I see. So it's not completely deleted then.

upvoted 0 times

...

Josphine

1 months ago

No, it's actually moved to a specific folder on the host.

upvoted 0 times

...

Mendy

1 months ago

I think releasing it means it can execute on the host.

upvoted 0 times

...

Ricki

2 months ago

I agree, better safe than sorry.

upvoted 0 times

...

Alpha

3 months ago

I believe the correct answer is A) It is moved into the C:\\CrowdStrike\\Quarantine\\Released folder on the host because it allows the file to be released but still keeps it in a controlled location.

upvoted 0 times

...

Eleonore

3 months ago

Oooh, I hope they don't release any zombies! That would be a real nightmare scenario.

upvoted 0 times

Tamekia

2 months ago

C) It is deleted

upvoted 0 times

...

Edna

2 months ago

B) It is allowed to execute on the host

upvoted 0 times

...

Brandon

2 months ago

A) It is moved into the C:\\CrowdStrike\\Quarantine\\Released folder on the host

upvoted 0 times

...

Alline

3 months ago

I think it is moved into the C:\\CrowdStrike\\Quarantine\\Released folder on the host.

upvoted 0 times

...

Bettina

3 months ago

What happens when a quarantined file is released?

upvoted 0 times

...