CrowdStrike Certified Falcon Administrator - 2024 Version - CCFA-200b Exam Questions
QUESTION NO: 1
Using Host setup and management inside the Falcon Console, how can you display sensors in Reduced Functionality Mode?
Using Host setup and management inside the Falcon Console, how can you display sensors in Reduced Functionality Mode?
Correct Answer: B
Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).
QUESTION NO: 2
A member of your SECOPS team is building custom scripts for RTR, but they are unable to save or share them in Falcon. What additional role do they need?
A member of your SECOPS team is building custom scripts for RTR, but they are unable to save or share them in Falcon. What additional role do they need?
Correct Answer: C
Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).
QUESTION NO: 3
Which role allows a Falcon user to create Real Time Response Custom Scripts?
Which role allows a Falcon user to create Real Time Response Custom Scripts?
Correct Answer: A
Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).
QUESTION NO: 4
A host has been Network Contained with Falcon and you have been asked to urgently update the Operating System with patches. You have tried using your patch update systems, but the jobs fail. Which configuration steps in the Falcon UI will allow these activities?
A host has been Network Contained with Falcon and you have been asked to urgently update the Operating System with patches. You have tried using your patch update systems, but the jobs fail. Which configuration steps in the Falcon UI will allow these activities?
Correct Answer: C
Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).
QUESTION NO: 5
A new prevention policy has been created for assignment to the group named "Servers". When you try to apply the policy, the "Servers" group is not available. What is the most likely reason the group is not available?
A new prevention policy has been created for assignment to the group named "Servers". When you try to apply the policy, the "Servers" group is not available. What is the most likely reason the group is not available?
Correct Answer: C
Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).
QUESTION NO: 6
You have created a new static host group to test a newly created sensor update policy, and need to add 500 servers into the group. You want to upload a list of hosts to Falcon for automatic addition into the group.
What file format must the list be for this to be successfully accomplished?
You have created a new static host group to test a newly created sensor update policy, and need to add 500 servers into the group. You want to upload a list of hosts to Falcon for automatic addition into the group.
What file format must the list be for this to be successfully accomplished?
Correct Answer: D
Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).
QUESTION NO: 7
From the Host management page, what is the best field to filter by for Domain Controllers to obtain sensor version information?
From the Host management page, what is the best field to filter by for Domain Controllers to obtain sensor version information?
Correct Answer: C
Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).
QUESTION NO: 8
In order to receive the most stable sensor updates, what level of automatic sensor updates should be applied to a host?
In order to receive the most stable sensor updates, what level of automatic sensor updates should be applied to a host?
Correct Answer: A
Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).
QUESTION NO: 9
You can create Fusion SOAR workflows to precisely define the actions you want Falcon to perform in response to incidents. Which three items must be defined in every trigger so that it executes successfully?
You can create Fusion SOAR workflows to precisely define the actions you want Falcon to perform in response to incidents. Which three items must be defined in every trigger so that it executes successfully?
Correct Answer: B
Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).
