Free CrowdStrike CrowdStrike-Cloud Exam Questions

Become CrowdStrike Certified with updated CrowdStrike-Cloud exam questions and correct answers

Page: 1 / 60

Total 298 Questions | Updated On: Aug 20, 2026

Add To Cart

Question 1

You are setting up a Falcon Fusion SOAR workflow to notify your team when any new executable isdownloaded to a container and run. You are using a Kubernetes and containers trigger.Which trigger subcategory and type should you select for this purpose?

A : Image Assessment > Detection

B : Image Assessment > Vulnerabilities

C : Container detection > Container runtime detection

D : Container detection > Container drift detection

Answer: C

Question 2

When integrating an AWS cloud account with CrowdStrike Falcon, which of the following permissions must the dedicated IAM role include?

A : Write access to modify security groups and IAM roles in the AWS account.

B : Permissions to read EC2 metadata, CloudTrail logs, and list S3 buckets.

C : Access to create new virtual machines for deploying the Falcon agent.

D : Full administrative access to the AWS account to manage all resources.

Answer: B

Question 3

What is the primary purpose of creating image assessment policies within Falcon Cloud Security?

A : To create firewall rules for restricting network traffic between containers.

B : To automate the deployment of container images across Kubernetes clusters.

C : To evaluate container images for vulnerabilities and enforce security compliance during the CI/CD pipeline.

D : To configure runtime monitoring for containerized applications in production environments.

Answer: C

Question 4

When using the Identity Analyzer feature in CrowdStrike CIEM to identify inactive users, which data source is primarily used to assess inactivity?

A : Audit trails of API calls and resource utilization.

B : Historical security alerts from CrowdStrike Falcon.

C : Network traffic logs from connected endpoints.

D : CrowdStrike Falcon sensor telemetry.

Answer: A

Question 5

The internal audit team is preparing for an internal review. You have been asked to provide a list ofconfiguration policy breaches against the NIST benchmark.Where can you access this list?