Question 1

How are user permissions set in Falcon?

Options :

A : Permissions are assigned to a User Group and then users are assigned to that group, thereby inheriting those permissions

B : Pre-defined permissions are assigned to sets called roles. Users can be assigned multiple roles based on job function and they assume a cumulative set of permissions based on those assignments

C : An administrator selects individual granular permissions from the Falcon Permissions List during user creation

D : Permissions are token-based. Users request access to a defined set of permissions and an administrator adds their token to the set of permissions

Answer: B

Question 2

Where can you modify settings to permit certain traffic during a containment period?

Options :

A : Prevention Policy

B : Host Settings

C : Containment Policy

D : Firewall Settings

Answer: C

Question 3

The Falcon sensor uses certificate pinning to defend against man-in-the-middle attacks. What must you ensure is disabled for the sensor to communicate with the CrowdStrike Cloud?

Options :

A : Proxy information

B : NMAP scanning

C : TCP inspection

D : Deep packet inspection

Answer: D

Question 4

What is the maximum number of patterns that can be added when creating a new exclusion?

Options :

A : 10

B : 0

C : 1

D : 5

Answer: D

Question 5

When creating a Host Group for all Workstations in an environment, what is the best method to ensure all workstation hosts are added to the group?

Options :

A : Create a Dynamic Group with Type=Workstation Assignment

B : Create a Dynamic Group and Import All Workstations

C : Create a Static Group and Import all Workstations

D : Create a Static Group with Type=Workstation Assignment

Answer: A

Free CCFA-200b Mock Exam – Practice Online Confidently

Buying Options: