Question 1

The NIST Special Publication 800-207 defines a Zero Trust Architecture (ZTA) to enhance security through continuous verification and least privilege principles. According to this framework, which of the following best describes a key characteristic of Zero Trust?

Options :

A : Firewalls and VPNs alone are sufficient to establish Zero Trust security.

B : Zero Trust is an optional security approach that applies only to cloud-based architectures.

C : Implicit trust is granted to users and devices within the corporate network once authenticated.

D : Authentication and authorization are enforced at every access request, regardless of the network location.

Answer: D

Question 2

What key factors contribute to the calculation of a Falcon user’s Zero Trust Assessment (ZTA) score?

Options :

A : The average time spent on critical applications by the user.

B : Device health, user behavior, application access history, and security posture.

C : Network bandwidth usage and geographic location of the user.

D : Static user role and permissions set by the administrator.

Answer: B

Question 3

Your organization wants to set up a connector to integrate CrowdStrike with its SIEM solution. Before proceeding, you need to locate the official documentation to guide the configuration process. Where should you look to find the most accurate and up-to-date connector setup documentation for this integration?

Options :

A : CrowdStrike Community Forum

B : CrowdStrike Developer Portal

C : Third-Party Security Blogs

D : CrowdStrike Falcon Console Help Section

Answer: D

Question 4

Which of the following best aligns with implementing Zero Trust Architecture to protect an organization’s resources?

Options :

A : Establishing a Perimeter Firewall with Intrusion Detection

B : Implementing Role-Based Access Control (RBAC) Combined with Multi-Factor Authentication (MFA)

C : Segmenting the Network Based on Traditional VLANs

D : Relying Solely on Endpoint Security Software

Answer: B

Question 5

Your organization plans to implement CrowdStrike to streamline identity management and secure access to cloud-based applications. The goal is to integrate with an existing Identity-as-a-Service (IDaaS) provider that already manages user authentication and role-based access. Which connector type should you configure to achieve this integration effectively?

Options :

A : Configure an MFA connector to enforce authentication policies through the IDaaS provider.

B : Disable connectors entirely and configure CrowdStrike policies directly.

C : Use the MFA connector and create manual rules for IDaaS integration.

D : Configure an IDaaS connector to integrate the existing identity provider with CrowdStrike.

Answer: D

Free CrowdStrike-IDP Mock Exam – Practice Online Confidently

Buying Options: