Question 1

What is the primary step required to deprovision a cloud account from Falcon in the CrowdStrike platform?

Options :

A : Disable the cloud account integration in the Falcon console under the "Cloud Accounts" tab.

B : Delete the cloud account directly from the cloud provider-s console to automatically deprovision it from Falcon.

C : Remove all workloads and endpoints linked to the cloud account before attempting to deprovision it.

D : Revoke the API client credentials associated with the cloud account in the "API Clients and Keys" section.

Answer: A

Question 2

During the registration of a cloud account into the CrowdStrike Falcon platform, a user encounters an error message indicating "Insufficient permissions to access cloud resources." Which of the following actions should the user take to resolve the issue?

Options :

A : Disable multi-factor authentication (MFA) for the cloud account temporarily.

B : Use the CrowdStrike service account credentials directly to bypass IAM role issues.

C : Assign the CrowdStrike IAM role to the cloud account with all necessary permissions.

D : Ensure that the cloud account is part of an active CrowdStrike subscription.

Answer: C

Question 3

Which feature in CrowdStrike Falcon enables the identification of potentially malicious network connections in a containerized environment?

Options :

A : External firewalls integrated with the Falcon platform.

B : CrowdStrike’s endpoint protection suite without specific container policies.

C : Network Access Control (NAC) policies configured for each container.

D : Container Threat Detection (CTD) integrated with runtime protection.

Answer: D

Question 4

When setting up automated remediation within AWS using CrowdStrike, which of the following steps is essential to ensure actions are executed correctly in response to detected threats?

Options :

A : Enable AWS Trusted Advisor to detect configuration issues.

B : Define IAM roles with least privilege access for CrowdStrike workflows.

C : Assign full administrative privileges to all CrowdStrike Service Principals in AWS.

D : Use AWS Backup to create snapshots of EC2 instances before remediation.

Answer: B

Question 5

After performing an image assessment in Falcon Cloud Security, which of the following is a typical actionable recommendation?

Options :

A : Apply a pod security policy to restrict privileged containers.

B : Disable unused Kubernetes Admission Controllers.

C : Limit the number of pods per node to prevent resource exhaustion.

D : Update container images to address identified critical vulnerabilities.

Answer: D

Confidently Practice Online with Free CCCS-203b Exam Cram

Buying Options: