Confidently Practice Online with Free CCFA-200b Exam Cram

Practice your CrowdStrike Certified Falcon Administrator (CCFA) certification test with free CCFA-200b exam cram and take control of your certification preparation. At FreeExamCram, you can practice online for free using real CCFA-200b exam dumps, verified questions, and expert-designed free online practice tests. Moreover our CrowdStrike CCFA-200b exam cram backed by our confidence-boosting refund guarantee.

Question 1

On the Host management page which filter could be used to quickly identify all devices categorized as a "Workstation" by the Falcon Platform?

Options :

A : Hostname

B : Status

C : Type

D : Platform

Answer: C

Question 2

The Falcon Administrator has created a new prevention policy to apply to the "Servers" group; however, when applying the new prevention policy this group is not appearing in the list of available groups. What is the most likely issue?

Options :

A :

The new prevention policy should be enabled first

B :

Host type was not defined correctly within the prevention policy

C :

The "Servers" group already has a policy applied to it

D :

The "Servers" group must be disabled first

Answer: C

Question 3

What is the maximum number of patterns that can be added when creating a new exclusion?

Options :

A : 10

B : 0

C : 1

D : 5

Answer: D

Question 4

An administrator creating an exclusion is limited to applying a rule to how many groups of hosts?

Options :

A : File exclusions are not aligned to groups or hosts

B : There is a limit of three groups of hosts applied to any exclusion

C : There is no limit and exclusions can be applied to any or all groups

D : Each exclusion can be aligned to only one group of hosts

Answer: B

Question 5

Which of the following is TRUE regarding disabling detections for a host?

Options :

A :

After disabling detections, the data for all existing detections prior to disabling detections is removed from the Event Search

B :

After disabling detections, the host will operate in Reduced Functionality Mode (RFM) until detections are enabled

C :

The DetectionSummaryEvent continues being sent to the Streaming API for that host

D :

The detections for that host are removed from the console immediately. No new detections will display in the console going forward unless detections are enabled

Answer: D