Question 1

Your security team is implementing honeytoken accounts to detect potential credential misuse in your organization. Which of the following is the best approach for creating and managing honeytoken accounts?

Options :

A : Disable honeytoken accounts after creation to avoid accidental usage.

B : Ensure that honeytoken accounts are identical to standard user accounts and log their activity daily.

C : Create accounts that resemble legitimate users but are configured to alert on any usage.

D : Use accounts with administrative privileges and ensure they are regularly accessed by administrators.

Answer: C

Question 2

Your security team is implementing a policy rule to enforce stricter access controls for users connecting to a financial application. The rule should deny access to all subnets except for a predefined secure subnet: 10.0.0.0/16. What additional step is necessary to ensure this rule is correctly enforced?

Options :

A : Create an exception list for all users accessing from 10.0.0.0/16.

B : Enable subnet masking in the policy group settings.

C : Publish the policy rule and assign it to the appropriate application.

D : Apply the rule to the default policy group.

Answer: C

Question 3

How does Falcon Identity Protection enhance a security model focused on Zero Trust principles in a domain environment?

Options :

A : By monitoring and restricting lateral movement through identity-based threat detection

B : By encrypting all network traffic within the domain

C : By automating access control policies for cloud-based applications

D : By replacing traditional firewalls and antivirus solutions

Answer: A

Question 4

In the context of potential risk factors related to identity, what does the "Severity" component assess?

Options :

A : The number of identities impacted by a breach

B : The likelihood that a vulnerability will be exploited

C : The probability that an attack will occur

D : The impact of a potential security breach if the risk materializes

Answer: D

Question 5

What is the primary purpose of applying filters during a risk assessment in the CrowdStrike platform?

Options :

A : To minimize the dataset for faster query execution

B : To focus analysis on specific risk-related indicators

C : To archive irrelevant logs for future reference

D : To automatically resolve low-priority incidents

Answer: B

Free CrowdStrike-IDP Mock Exam – Practice Online Confidently

Buying Options: