Free CrowdStrike CCFA-200b Exam Questions

Become CrowdStrike Certified with updated CCFA-200b exam questions and correct answers

Page: 1 / 33

Total 164 Questions | Updated On: Aug 18, 2026

Add To Cart

Question 1

Which role allows a user to connect to hosts using Real-Time Response?

A : Endpoint Manager

B : Falcon Administrator

C : Real Time Responder -- Active Responder

D : Prevention Hashes Manager

Answer: C

Question 2

On the Host management page which filter could be used to quickly identify all devices categorized as a "Workstation" by the Falcon Platform?

A : Hostname

B : Status

C : Type

D : Platform

Answer: C

Question 3

Which port and protocol does the sensor use to communicate with the CrowdStrike Cloud?

A : TCP port 22 (SSH)

B : TCP port 443 (HTTPS)

C : TCP port 80 (HTTP)

D : TCP UDP port 53 (DNS)

Answer: B

Question 4

When creating an API client, which of the following must be saved immediately since it cannot be viewed again after the client is created?

A : Base URL

B : Secret

C : Client ID

D : Client name

Answer: B

Question 5

While a host is Network contained, you need to allow the host to access internal network resources on specific IP addresses to perform patching and remediation. Which configuration would you choose?

A : Configure a Real Time Response policy allowlist with the specific IP addresses

B : Configure a Containment Policy with the specific IP addresses

C : Configure a Containment Policy with the entire internal IP CIDR block

D : Configure the Host firewall to allowlist the specific IP addresses

Answer: D

Page: 1 / 33

Total 164 Questions | Updated On: Aug 18, 2026

Add To Cart