Free CrowdStrike CCCS-203b Exam Questions

Question 1

What is the recommended action after CrowdStrike Falcon identifies a potentially malicious network connection in a containerized workload?

A : Rely on cloud provider firewall logs to verify the nature of the connection.

B : Re-scan the container image used by the workload to identify vulnerabilities.

C : Automatically restart the affected container to terminate the malicious connection.

D : Block the container-s network access and perform a forensic investigation of the workload.

Answer: D

Question 2

The internal audit team is preparing for an internal review. You have been asked to provide a list ofconfiguration policy breaches against the NIST benchmark.Where can you access this list?

A : Export Cloud Posture – Cloud indicators of attack

B : Export Cloud Posture – Indicators of misconfiguration

C : Export Cloud Posture – Remediation status

D : Export Cloud Posture – Cloud Posture dashboard

Answer: B

Question 3

You are investigating unassessed images using Falcon Cloud Security.What widget displays current totals of assessed and unassessed images in the Registry connections sectionunder Image assessment settings?

A : Image processing

B : Assessed images

C : Connection status

D : Registry assessment status

Answer: D

Question 4

You are investigating unassessed images using Falcon Cloud Security.What widget displays current totals of assessed and unassessed images in the Registry connections sectionunder Image assessment settings?

A : Image processing

B : Assessed images

C : Connection status

D : Registry assessment status

Answer: D

Question 5

Which best practice should administrators follow to ensure effective notifications when creating Falcon Fusion workflows for automated remediation?

A : Rely on the default notification settings provided by Falcon Central.

B : Send notifications to all organization users to ensure wide visibility.

C : Schedule notifications to be sent in bulk at the end of each day.

D : Use clear and concise notification messages detailing the remediation action.

Answer: D