Confidently Practice Online with Free CCFA-200b Exam Cram

Practice your CrowdStrike Certified Falcon Administrator (CCFA) certification test with free CCFA-200b exam cram and take control of your certification preparation. At FreeExamCram, you can practice online for free using real CCFA-200b exam dumps, verified questions, and expert-designed free online practice tests. Moreover our CrowdStrike CCFA-200b exam cram backed by our confidence-boosting refund guarantee.

Question 1

How are user permissions set in Falcon?

Options :

A : Permissions are assigned to a User Group and then users are assigned to that group, thereby inheriting those permissions

B : Pre-defined permissions are assigned to sets called roles. Users can be assigned multiple roles based on job function and they assume a cumulative set of permissions based on those assignments

C : An administrator selects individual granular permissions from the Falcon Permissions List during user creation

D : Permissions are token-based. Users request access to a defined set of permissions and an administrator adds their token to the set of permissions

Answer: B

Question 2

When would the No Action option be assigned to a hash in IOC Management?

Options :

A : When you want to save the indicator for later action, but do not want to block or allow it at this time

B : Add the indicator to your allowlist and do not detect it

C : There is no such option as No Action available in the Falcon console

D : Add the indicator to your blocklist and show it as a detection

Answer: A

Question 3

Which of the following would give you information about inactive sensors within the Falcon console?

Options :

A : Sensor Update Policies

B : Sensor Downloads

C : Sensor Coverage Lookup

D : Sensor Health

Answer: D

Question 4

Which of the following uses Regex to create a detection or take a preventative action?

Options :

A : Machine Learning Exclusion

B : Custom IOA

C : Sensor Visibility Exclusion

D : Custom IOC

Answer: B

Question 5

The Falcon sensor uses certificate pinning to defend against man-in-the-middle attacks. What must you ensure is disabled for the sensor to communicate with the CrowdStrike Cloud?

Options :

A : Proxy information

B : NMAP scanning

C : TCP inspection

D : Deep packet inspection

Answer: D