Question 1

The IT security team is preparing a report on domain security. To identify specific weaknesses, they want to focus on a single domain in the Falcon Identity Protection Overview dashboard. The team asks for guidance on how to use the "Scope" feature to refine the displayed data. What is the primary effect of setting the "Scope" in the Falcon Identity Protection Overview dashboard to a single domain?

Options :

A : The dashboard filters out all data unrelated to the selected domain, showing detailed metrics for only that domain.

B : The dashboard prioritizes identity-related risks for the selected domain but still includes general metrics for all domains.

C : The dashboard disables all alerts for other domains to reduce notification volume.

D : The dashboard automatically exports a detailed report for the selected domain.

Answer: A

Question 2

An organization wants to implement domain security measures to protect its Active Directory environment. Which goal from the domain security overview most directly contributes to the prevention of unauthorized access to privileged accounts?

Options :

A : Enforce least privilege access across all Active Directory accounts.

B : Enable audit logging for all user activities in the domain.

C : Deploy anti-virus solutions to all endpoints within the network.

D : Disable unused domain controllers to reduce the attack surface.

Answer: A

Question 3

The IT security team is preparing a report on domain security. To identify specific weaknesses, they want to focus on a single domain in the Falcon Identity Protection Overview dashboard. The team asks for guidance on how to use the "Scope" feature to refine the displayed data. What is the primary effect of setting the "Scope" in the Falcon Identity Protection Overview dashboard to a single domain?

Options :

A : The dashboard filters out all data unrelated to the selected domain, showing detailed metrics for only that domain.

B : The dashboard prioritizes identity-related risks for the selected domain but still includes general metrics for all domains.

C : The dashboard disables all alerts for other domains to reduce notification volume.

D : The dashboard automatically exports a detailed report for the selected domain.

Answer: A

Question 4

After deploying CrowdStrike Falcon, you notice that one of your domain controllers (DCs) is not reporting its activity in the Falcon Console. This DC is responsible for managing a significant number of endpoints. Which of the following actions will help you resolve this issue?

Options :

A : Manually synchronize the domain controller with CrowdStrike by updating the domain schema settings in Active Directory.

B : Verify that the Falcon agent is installed on the domain controller and is communicating with the Falcon Cloud.

C : Reinstall the operating system on the domain controller to resolve potential compatibility issues with CrowdStrike Falcon.

D : Enable group policy inheritance for the domain controller to allow reporting through CrowdStrike.

Answer: B

Question 5

Which scenario best illustrates the application of analysis-based risk as opposed to detection-based risk?

Options :

A : An endpoint protection tool triggers an alert for the detection of known malware on a workstation.

B : A threat hunter observes a consistent pattern of credential misuse across multiple endpoints after reviewing system logs.

C : A security tool flags an IP address for unusually high outbound traffic, leading to an investigation.

D : A firewall blocks an IP address based on a reputation feed identifying it as malicious.

Answer: B

Free CrowdStrike-IDP Mock Exam – Practice Online Confidently

Buying Options: