Free Online CrowdStrike CCFA-200 Practice Test

Prepare Your CrowdStrike CCFA-200 Exam Questions with Free online CCFA-200 Practice Test. Get Brilliant CrowdStrike Certified Falcon Administrator Exam Results with Valid CCFA 200 Exam Dumps.

Page: 1 / 33

Total 164 Questions | Updated On: May 14, 2024

Add To Cart

Question 1

What are custom alerts based on?

A : Custom workflows

B : Custom event based triggers

C : Predefined alert templates

D : User defined Splunk queries

Answer: B

Question 2

The Falcon sensor uses certificate pinning to defend against man-in-the-middle attacks. What must you ensure is disabled for the sensor to communicate with the CrowdStrike Cloud?

A : Proxy information

B : NMAP scanning

C : TCP inspection

D : Deep packet inspection

Answer: D

Question 3

Which Real-Time response (RTR) role is automatically assigned to the falcon administrator ?

A : No RTR roles are automatically assigned to the Falcon administrator

B : Administrator

C : Read only analyst

D : Active Responder

Answer: A

Question 4

Which of the following is NOT an available filter on the Hosts Management page?

A : Hostname

B : Username

C : Group

D : OS Version

Answer: D

Question 5

An administrator creating an exclusion is limited to applying a rule to how many groups of hosts?

A : File exclusions are not aligned to groups or hosts

B : There is a limit of three groups of hosts applied to any exclusion

C : There is no limit and exclusions can be applied to any or all groups

D : Each exclusion can be aligned to only one group of hosts

Answer: B

Page: 1 / 33

Total 164 Questions | Updated On: May 14, 2024

Add To Cart