Question 1

You are registering a new AWS account with CrowdStrike Falcon, but the process fails with an error stating:

"Insufficient permissions for role ARN."

What is the most likely cause of this issue?

Options :

A : The IAM role created for the account lacks the required policies for CrowdStrike integration.

B : The AWS account is already registered with another CrowdStrike instance.

C : The CrowdStrike Falcon sensor is not installed on the EC2 instances in the account.

D : Multi-factor authentication (MFA) is disabled on the AWS account.

Answer: A

Question 2

What is the primary action required to enable runtime protection for containers in a cloud environment using CrowdStrike Falcon?

Options :

A : Install the Falcon sensor inside each running container.

B : Update the container runtime (e.g., Docker or containerd) to the latest version.

C : Enable the runtime protection policy within the Falcon console and assign it to a host group.

D : Deploy the Falcon Container Sensor to the host running the container.

Answer: C

Question 3

Which of the following is the most critical step when configuring an automated remediation workflow in Falcon Fusion for AWS findings?

Options :

A : Configure the workflow to delete all flagged resources immediately upon detection.

B : Integrate AWS Security Hub with Falcon Fusion to detect findings.

C : Set up appropriate triggers and actions for specific AWS findings.

D : Ensure IAM roles in AWS grant unrestricted access for remediation actions.

Answer: C

Question 4

When analyzing cloud findings for misconfigurations, which of the following would be considered a high-risk practice that should be flagged for remediation?

Options :

A : Enforcing multi-factor authentication (MFA) for all cloud administrator accounts

B : Implementing role-based access control (RBAC) policies for cloud resources

C : Using network security groups (NSGs) to limit traffic to trusted IP addresses

D : Allowing unrestricted inbound traffic to cloud-hosted resources on port 22

Answer: D

Question 5

During the registration of a cloud account into the CrowdStrike Falcon platform, a user encounters an error message indicating "Insufficient permissions to access cloud resources." Which of the following actions should the user take to resolve the issue?

Options :

A : Disable multi-factor authentication (MFA) for the cloud account temporarily.

B : Use the CrowdStrike service account credentials directly to bypass IAM role issues.

C : Assign the CrowdStrike IAM role to the cloud account with all necessary permissions.

D : Ensure that the cloud account is part of an active CrowdStrike subscription.

Answer: C

Free CrowdStrike-Cloud Mock Exam – Practice Online Confidently

Buying Options: