Question 1

What is the recommended course of action after identifying unassessed images in production using CrowdStrike Falcon?

Options :

A : Configure a backup server to replace containers using unassessed images.

B : Immediately stop all containers using unassessed images to avoid security risks.

C : Conduct a vulnerability assessment on the identified images and update policies as needed.

D : Use the Falcon runtime protection policy to automatically remediate vulnerabilities.

Answer: C

Question 2

You are registering a new AWS account with CrowdStrike Falcon, but the process fails with an error stating:"Insufficient permissions for role ARN." What is the most likely cause of this issue?

Options :

A : The IAM role created for the account lacks the required policies for CrowdStrike integration.

B : The AWS account is already registered with another CrowdStrike instance.

C : The CrowdStrike Falcon sensor is not installed on the EC2 instances in the account.

D : Multi-factor authentication (MFA) is disabled on the AWS account.

Answer: A

Question 3

A security team has identified an outdated Kubernetes Admission Controller policy in Falcon Cloud Security that enforces image signing requirements for container workloads. They need to update the policy to align with new organizational guidelines. What is the most appropriate way to edit this policy?

Options :

A : Disable the existing policy in Falcon Cloud Security and replace it with a new Kubernetes ConfigMap.

B : Export the existing policy as a YAML file, edit it locally, and re-import it to Falcon Cloud Security.

C : Modify the existing policy directly in the Falcon Cloud Security Console.

D : Delete the current policy and create a new one from scratch.

Answer: C

Question 4

What is the primary action required to enable runtime protection for containers in a cloud environment using CrowdStrike Falcon?

Options :

A : Install the Falcon sensor inside each running container.

B : Update the container runtime (e.g., Docker or containerd) to the latest version.

C : Enable the runtime protection policy within the Falcon console and assign it to a host group.

D : Deploy the Falcon Container Sensor to the host running the container.

Answer: C

Question 5

When creating an API client for cloud account integration in CrowdStrike Falcon, which of the following is a required step?

Options :

A : Generate a public-private key pair and upload the private key to Falcon

B : Assign specific API scopes to limit the client-s access

C : Grant the API client administrator privileges to all cloud accounts

D : Configure the API client to use legacy authentication methods

Answer: B

Confidently Practice Online with Free 156-215.82 Exam Cram

Buying Options: