Practice CCFA-200 Exam Online

Question 1

When the Notify End Users policy setting is turned on, which of the following is TRUE?

A : End users will not be notified as we would not want to notify a malicious actor of a detection. This setting does not exist

B : End users will be immediately notified via a pop-up that their machine is in-network isolation

C : End-users receive a pop-up notification when a prevention action occurs

D : End users will receive a pop-up allowing them to confirm or refuse a pending quarantine

Answer: C

Question 2

When would the No Action option be assigned to a hash in IOC Management?

A : When you want to save the indicator for later action, but do not want to block or allow it at this time

B : Add the indicator to your allowlist and do not detect it

C : There is no such option as No Action available in the Falcon console

D : Add the indicator to your blocklist and show it as a detection

Answer: A

Question 3

While a host is Network contained, you need to allow the host to access internal network resources on specific IP addresses to perform patching and remediation. Which configuration would you choose?

A : Configure a Real Time Response policy allowlist with the specific IP addresses

B : Configure a Containment Policy with the specific IP addresses

C : Configure a Containment Policy with the entire internal IP CIDR block

D : Configure the Host firewall to allowlist the specific IP addresses

Answer: D

Question 4

Which role allows a user to connect to hosts using Real-Time Response?

A : Endpoint Manager

B : Falcon Administrator

C : Real Time Responder -- Active Responder

D : Prevention Hashes Manager

Answer: C

Question 5

Which of the following can a Falcon Administrator edit in an existing user's profile?

A : First or Last name

B : Phone number

C : Email address

D : Working groups

Answer: D

Name:	CrowdStrike Certified Falcon Administrator
Exam Code:	CCFA-200
Certification:	CrowdStrike Falcon
Vendor:	CrowdStrike
Total Questions:	164
Last Updated:	Apr 25, 2024

CrowdStrike CCFA-200