Question 1

What is the primary purpose of creating image assessment policies within Falcon Cloud Security?

Options :

A : To create firewall rules for restricting network traffic between containers.

B : To automate the deployment of container images across Kubernetes clusters.

C : To evaluate container images for vulnerabilities and enforce security compliance during the CI/CD pipeline.

D : To configure runtime monitoring for containerized applications in production environments.

Answer: C

Question 2

During the registration of a cloud account into the CrowdStrike Falcon platform, a user encounters an error message indicating "Insufficient permissions to access cloud resources." Which of the following actions should the user take to resolve the issue?

Options :

A : Disable multi-factor authentication (MFA) for the cloud account temporarily.

B : Use the CrowdStrike service account credentials directly to bypass IAM role issues.

C : Assign the CrowdStrike IAM role to the cloud account with all necessary permissions.

D : Ensure that the cloud account is part of an active CrowdStrike subscription.

Answer: C

Question 3

What is the primary purpose of creating Falcon Cloud Security Policies and Rules in a cloud environment?

Options :

A : To configure network ingress and egress rules for cloud-native firewalls.

B : To enforce granular security controls for workloads, users, and cloud resources based on predefined conditions.

C : To manage the deployment of Falcon agents across virtual machines.

D : To automate software updates for containerized applications in the cloud.

Answer: B

Question 4

What is the primary action required to enable runtime protection for containers in a cloud environment using CrowdStrike Falcon?

Options :

A : Install the Falcon sensor inside each running container.

B : Update the container runtime (e.g., Docker or containerd) to the latest version.

C : Enable the runtime protection policy within the Falcon console and assign it to a host group.

D : Deploy the Falcon Container Sensor to the host running the container.

Answer: C

Question 5

After identifying an account with unnecessary access privileges using the CrowdStrike CIEM/Identity Analyzer, what is the best action to mitigate risks?

Options :

A : Transfer the account-s permissions to a shared admin account for operational efficiency.

B : Delete all permissions for the account immediately.

C : Downgrade permissions to "read-only" for all resources.

D : Implement the principle of least privilege by aligning permissions with the account-s actual usage.

Answer: D

Free CrowdStrike-Cloud Mock Exam – Practice Online Confidently

Buying Options: