Question 1

Which method is most effective for identifying Indicators of Attack (IOAs) in a cloud-native environment?

Options :

A : Implement runtime monitoring via Kubernetes native tools such as kube-audit

B : Utilize CrowdStrike’s integration with cloud-native APIs for IOA detection

C : Deploy a CrowdStrike Falcon sensor on all endpoints

D : Rely on cloud provider security tools like AWS GuardDuty or Azure Security Center

Answer: B

Question 2

Which of the following is not a required step to configure the Falcon CWPP Image Scanning Script for automated vulnerability scanning in a CI/CD pipeline?

Options :

A : Define scanning exclusions based on organization-specific policies.

B : Install the Falcon Image Scanning Script on the CI/CD build server.

C : Register the container registry with the Falcon platform for continuous scanning.

D : Map the scanning script-s output directory to a shared location in the CI/CD environment.

Answer: C

Question 3

After identifying an account with unnecessary access privileges using the CrowdStrike CIEM/Identity Analyzer, what is the best action to mitigate risks?

Options :

A : Transfer the account-s permissions to a shared admin account for operational efficiency.

B : Delete all permissions for the account immediately.

C : Downgrade permissions to "read-only" for all resources.

D : Implement the principle of least privilege by aligning permissions with the account-s actual usage.

Answer: D

Question 4

When using Falcon Fusion, how can administrators ensure they are notified immediately about critical threats detected in their cloud infrastructure?

Options :

A : Activate the Immediate Alert Policy in Falcon Central.

B : Integrate Falcon Fusion with CrowdStrike Threat Graph for alerts.

C : Set up recurring reports in the Falcon Dashboard.

D : Configure automated actions in Workflow Builder to trigger notifications.

Answer: D

Question 5

Which of the following steps is required to configure a cloud account using APIs for integration with CrowdStrike Falcon?

Options :

A : Manually deploy CrowdStrike agents on all workloads before registering the account via APIs.

B : Provide read-only API access to the Falcon platform for monitoring and reporting.

C : Directly upload API credentials to the CrowdStrike Falcon Console without generating an API client.

D : Generate an API client with appropriate permissions and use it to authenticate and register the cloud account.

Answer: D

Confidently Practice Online with Free 156-215.82 Exam Cram

Buying Options: