live chat

McAfee Secure sites help keep you safe from identity theft, credit card fraud, spyware, spam, viruses and online scams

Home
Products
- IBM
- HP
- CompTIA
- VMware
- Symantec
- Apple
- EMC
- Juniper
- Network Appliance
- Citrix
- Avaya
- Lpi
- The Open Group
- SAP
- SASInstitute
- Adobe
- EXIN
- PMI
- Zend-Technologies
- CheckPoint
- Tibco
- FileMaker
- Alcatel-Lucent
- EC-COUNCIL
- Polycom
- ISEB
- Hitachi
- SNIA
Certifications
Free Demo
Guarantee
How to pay?
F.A.Q

Cart
Member Center

Pass4Test 10%OFF Discount Code

CrowdStrike Certified Falcon Administrator - CCFA-200 Exam Questions

Page: 1 / 16
Total 152 questions

Please signup / login to view this exam, then you will be able to view the entire exam for free.

Get Full Access Now

QUESTION NO: 1
Which role allows a user to connect to hosts using Real-Time Response?

A. Prevention Hashes Manager B. Endpoint Manager C. Real Time Responder - Active Responder D. Falcon Administrator

Correct Answer: C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 2
An administrator creating an exclusion is limited to applying a rule to how many groups of hosts?

A. File exclusions are not aligned to groups or hosts B. There is a limit of three groups of hosts applied to any exclusion C. There is no limit and exclusions can be applied to any or all groups D. Each exclusion can be aligned to only one group of hosts

Correct Answer: C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 3
How do you disable all detections for a host?

A. Contact support and provide them with the Agent ID (AID) for the machine and they will put it on the Disabled Hosts list in your Customer ID (CID) B. In Host Management, select the host and then choose the option to Disable Detections C. You cannot disable all detections on individual hosts as it would put them at risk D. Create an exclusion rule and apply it to the machine or group of machines

Correct Answer: B

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 4
When the Notify End Users policy setting is turned on, which of the following is TRUE?

A. End users will not be notified as we would not want to notify a malicious actor of a detection. This setting does not exist B. End users will receive a pop-up allowing them to confirm or refuse a pending quarantine C. End users will be immediately notified via a pop-up that their machine is in-network isolation D. End-users receive a pop-up notification when a prevention action occurs

Correct Answer: D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 5
Which of the following prevention policy settings monitors contents of scripts and shells for execution of malicious content on compatible operating systems?

A. FileSystem Visibility B. Engine (Full Visibility) C. Suspicious Scripts and Commands D. Script-based Execution Monitoring

Correct Answer: D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 6
Which of the following is a valid step when troubleshooting sensor installation failure?

A. Delete any available application crash log files B. Confirm all required services are running on the system C. Enable the Windows firewall D. Disable SSL and TLS on the host

Correct Answer: B

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 7
You want to create a detection-only policy. How do you set this up in your policy's settings?

A. Enable the detection sliders and disable the prevention sliders. Then ensure that Next Gen Antivirus is enabled so it will disable Windows Defender. B. Select the "Detect-Only" template. Disable hash blocking and exclusions. C. You can't create a policy that detects but does not prevent. Use Custom IOA rules to detect. D. Set the Next-Gen Antivirus detection settings to the desired detection level and all the prevention sliders to disabled. Do not activate any of the other blocking or malware prevention options.

Correct Answer: D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 8
What is the primary purpose of using glob syntax in an exclusion?

A. To specify a Domain be excluded from detections B. To specify a network share be excluded from detections C. To specify exclusion patterns to easily add files and folders and extensions to be prevented D. To specify exclusion patterns to easily exclude files and folders and extensions from detections

Correct Answer: D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 9
Which of the following applies to Custom Blocking Prevention Policy settings?

A. You can only blocklist hashes via the API B. Hashes must be entered on the Prevention Hashes page before they can be blocked via this policy C. Executions blocked via hash blocklist may have partially executed prior to hash calculation process remediation may be necessary D. Blocklisting applies to hashes, IP addresses, and domains

Correct Answer: B

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 10
How many "Auto" sensor version update options are available for Windows Sensor Update Policies?

A. 0 B. 1 C. 3 D. 2

Correct Answer: C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

Page: 1 / 16
Total 152 questions

Unlock all CCFA-200 features

No captcha needed
365 Days Free Updates
Set your Desired Pass Percentage
Allocate Time (Hours : Minutes)
Two Modes For CCFA-200 Practice
Customer Support

Get Full Access Now

Frequently Asked Questions

Privacy Statement

SAP-Certifications, CompTIA A+, CompTIA Security+, CompTIA Network+, CompTIA Linux+, CompTIA Project+, IBM certifications, IBM DB2, SCJP, JNCIA

Copyright © 2001-2026 Pass4Test NETWORK CO.,LIMITED. All Rights Reserved. All trademarks used are properties of their respective owners.