Free CrowdStrike CCFA-200b Exam Questions

Become CrowdStrike Certified with updated CCFA-200b exam questions and correct answers

Page: 1 / 33

Total 164 Questions | Updated On: Apr 27, 2026

Add To Cart

Question 1

Which Real-Time response (RTR) role is automatically assigned to the falcon administrator ?

A : No RTR roles are automatically assigned to the Falcon administrator

B : Administrator

C : Read only analyst

D : Active Responder

Answer: A

Question 2

What is the maximum number of patterns that can be added when creating a new exclusion?

A : 10

B : 0

C : 1

D : 5

Answer: D

Question 3

When creating a Host Group for all Workstations in an environment, what is the best method to ensure all workstation hosts are added to the group?

A : Create a Dynamic Group with Type=Workstation Assignment

B : Create a Dynamic Group and Import All Workstations

C : Create a Static Group and Import all Workstations

D : Create a Static Group with Type=Workstation Assignment

Answer: A

Question 4

You are evaluating the most appropriate Prevention Policy Machine Learning slider settings for your environment. In your testing phase, you configure the Detection slider as Aggressive. After running the sensor with this configuration for 1 week of testing, which Audit report should you review to determine the best Machine Learning slider settings for your organization?

A : Prevention Policy Audit Trail

B : Prevention Policy Debug

C : Prevention Hashes Ignored

D : Machine-Learning Prevention Monitoring

Answer: A

Question 5

You have a Windows host on your network inReduced functionality mode (RFM). While thesystem is in RFM, which of the following is TRUE?

A : Event reporting will be unavailable

B : System monitoring will be unavailable

C : Prevention patterns will not be triggered

D : Some detection patterns and preventionswill not be triggered

Answer: D

Page: 1 / 33

Total 164 Questions | Updated On: Apr 27, 2026

Add To Cart