Free CrowdStrike CCFA-200b Exam Questions

Become CrowdStrike Certified with updated CCFA-200b exam questions and correct answers

Page: 1 / 33

Total 164 Questions | Updated On: Jun 15, 2026

Add To Cart

Question 1

A sensor that has not contacted the Falcon cloudwill be automatically deleted from the hosts listafter how many days?

A : 30 Days

B : 45 Days

C : 90 Days

D : 60 Days

Answer: B

Question 2

How are user permissions set in Falcon?

A : Permissions are assigned to a User Group and then users are assigned to that group, thereby inheriting those permissions

B : Pre-defined permissions are assigned to sets called roles. Users can be assigned multiple roles based on job function and they assume a cumulative set of permissions based on those assignments

C : An administrator selects individual granular permissions from the Falcon Permissions List during user creation

D : Permissions are token-based. Users request access to a defined set of permissions and an administrator adds their token to the set of permissions

Answer: B

Question 3

When configuring a specific prevention policy, the admin can align the policy to two different types of groups, Host Groups and which other?

A : Custom IOA Rule Groups

B : Custom IOC Groups

C : Enterprise Groups

D : Operating System Groups

Answer: D

Question 4

What command should be run to verify if a Windows sensor is running?

A : regedit myfile.reg

B : sc query csagent

C : netstat -f

D : ps -ef | grep falcon

Answer: B

Question 5

Which of the following is NOT an available filter on the Hosts Management page?

A : Hostname

B : Username

C : Group

D : OS Version

Answer: D

Page: 1 / 33

Total 164 Questions | Updated On: Jun 15, 2026

Add To Cart