Question 1

What happens to the data and alerts linked to a cloud account after it is deprovisioned from the Falcon console?

Options :

A : All data and alerts associated with the account are immediately and permanently deleted.

B : Data is archived for 30 days and then permanently deleted.

C : Historical data and alerts remain accessible, but new data collection stops.

D : The cloud account-s data remains visible only if the account is re-registered within 7 days.

Answer: C

Question 2

What is the primary purpose of creating Falcon Cloud Security Policies and Rules in a cloud environment?

Options :

A : To configure network ingress and egress rules for cloud-native firewalls.

B : To enforce granular security controls for workloads, users, and cloud resources based on predefined conditions.

C : To manage the deployment of Falcon agents across virtual machines.

D : To automate software updates for containerized applications in the cloud.

Answer: B

Question 3

When CrowdStrike Falcon detects a suspicious outbound network connection from a runtime workload, what is the best immediate action to mitigate potential risks?

Options :

A : Quarantine the Affected Host

B : Enable DNS Filtering Across All Hosts

C : Manually Terminate the Suspected Network Connection

D : Generate an Incident Report for Future Review

Answer: A

Question 4

What is the potential impact if CrowdStrike IP addresses are not added to your container registry allowlist for image assessment?

Options :

A : Image assessment will fail, but other CrowdStrike services will continue to function.

B : CrowdStrike will switch to a default public IP to bypass the restriction.

C : Image assessment will proceed with reduced capabilities.

D : Image assessment will continue without any issues due to fallback IP detection.

Answer: A

Question 5

Which of the following is the most critical step when configuring an automated remediation workflow in Falcon Fusion for AWS findings?

Options :

A : Configure the workflow to delete all flagged resources immediately upon detection.

B : Integrate AWS Security Hub with Falcon Fusion to detect findings.

C : Set up appropriate triggers and actions for specific AWS findings.

D : Ensure IAM roles in AWS grant unrestricted access for remediation actions.

Answer: C

Confidently Practice Online with Free CCCS-203b Exam Cram

Buying Options: