Question 1

Which feature of Falcon Horizon allows users to identify exposed cloud services and workloads running without requiring the deployment of a Falcon sensor?

Options :

A : Real-time behavioral monitoring

B : API-driven cloud workload discovery

C : Vulnerability patching orchestration

D : Deployment of lightweight monitoring agents

Answer: B

Question 2

Which of the following is the most critical step when configuring an automated remediation workflow in Falcon Fusion for AWS findings?

Options :

A : Configure the workflow to delete all flagged resources immediately upon detection.

B : Integrate AWS Security Hub with Falcon Fusion to detect findings.

C : Set up appropriate triggers and actions for specific AWS findings.

D : Ensure IAM roles in AWS grant unrestricted access for remediation actions.

Answer: C

Question 3

What is the potential impact if CrowdStrike IP addresses are not added to your container registry allowlist for image assessment?

Options :

A : Image assessment will fail, but other CrowdStrike services will continue to function.

B : CrowdStrike will switch to a default public IP to bypass the restriction.

C : Image assessment will proceed with reduced capabilities.

D : Image assessment will continue without any issues due to fallback IP detection.

Answer: A

Question 4

After identifying excessive permissions and missing MFA in IAM configurations, which remediation strategy is most aligned with CrowdStrike CIEM’s recommendations?

Options :

A : Delete all accounts flagged by CIEM’s Identity Analyzer.

B : Enable MFA and implement least privilege access policies for the flagged accounts.

C : Revoke all permissions from the identified accounts.

D : Transfer ownership of flagged accounts to a different administrator.

Answer: B

Question 5

What is the potential impact if CrowdStrike IP addresses are not added to your container registry allowlist for image assessment?

Options :

A : Image assessment will fail, but other CrowdStrike services will continue to function.

B : CrowdStrike will switch to a default public IP to bypass the restriction.

C : Image assessment will proceed with reduced capabilities.

D : Image assessment will continue without any issues due to fallback IP detection.

Answer: A

Free CrowdStrike-Cloud Mock Exam – Practice Online Confidently

Buying Options: