Free CrowdStrike CCFA-200b Exam Questions

Become CrowdStrike Certified with updated CCFA-200b exam questions and correct answers

Page: 1 / 33

Total 164 Questions | Updated On: Dec 16, 2025

Add To Cart

Question 1

When creating a Host Group for all Workstations in an environment, what is the best method to ensure all workstation hosts are added to the group?

A : Create a Dynamic Group with Type=Workstation Assignment

B : Create a Dynamic Group and Import All Workstations

C : Create a Static Group and Import all Workstations

D : Create a Static Group with Type=Workstation Assignment

Answer: A

Question 2

How can a Falcon Administrator configure a pop-up message to be displayed on a host when the Falcon sensor blocks, kills or quarantines an activity?

A : By ensuring each user has set the 'pop-ups allowed' in their User Profile configuration page

B : By enabling 'Upload quarantined files' in the General Settings configuration page

C : By turning on the 'Notify End Users' setting at the top of the Prevention policy details configuration page

D : By selecting 'Enable pop-up messages' from the User configuration page

Answer: C

Question 3

You have a Windows host on your network inReduced functionality mode (RFM). While thesystem is in RFM, which of the following is TRUE?

A : Event reporting will be unavailable

B : System monitoring will be unavailable

C : Prevention patterns will not be triggered

D : Some detection patterns and preventionswill not be triggered

Answer: D

Question 4

The Falcon Administrator has created a new prevention policy to apply to the "Servers" group; however, when applying the new prevention policy this group is not appearing in the list of available groups. What is the most likely issue?

A : The new prevention policy should be enabled first

B : Host type was not defined correctly within the prevention policy

C : The "Servers" group already has a policy applied to it

D : The "Servers" group must be disabled first

Answer: C

Question 5

What are custom alerts based on?

A : Custom workflows

B : Custom event based triggers

C : Predefined alert templates

D : User defined Splunk queries

Answer: B

Page: 1 / 33

Total 164 Questions | Updated On: Dec 16, 2025

Add To Cart