Confidently Practice Online with Free CCFA-200b Exam Cram

Practice your CrowdStrike Certified Falcon Administrator (CCFA) certification test with free CCFA-200b exam cram and take control of your certification preparation. At FreeExamCram, you can practice online for free using real CCFA-200b exam dumps, verified questions, and expert-designed free online practice tests. Moreover our CrowdStrike CCFA-200b exam cram backed by our confidence-boosting refund guarantee.

Question 1

Which port and protocol does the sensor use to communicate with the CrowdStrike Cloud?

Options :

A : TCP port 22 (SSH)

B : TCP port 443 (HTTPS)

C : TCP port 80 (HTTP)

D : TCP UDP port 53 (DNS)

Answer: B

Question 2

Which of the following uses Regex to create a detection or take a preventative action?

Options :

A : Machine Learning Exclusion

B : Custom IOA

C : Sensor Visibility Exclusion

D : Custom IOC

Answer: B

Question 3

When would the No Action option be assigned to a hash in IOC Management?

Options :

A : When you want to save the indicator for later action, but do not want to block or allow it at this time

B : Add the indicator to your allowlist and do not detect it

C : There is no such option as No Action available in the Falcon console

D : Add the indicator to your blocklist and show it as a detection

Answer: A

Question 4

Which Real-Time response (RTR) role is automatically assigned to the falcon administrator ?

Options :

A :

No RTR roles are automatically assigned to the Falcon administrator

B : Administrator

C : Read only analyst

D : Active Responder

Answer: A

Question 5

The Falcon Administrator has created a new prevention policy to apply to the "Servers" group; however, when applying the new prevention policy this group is not appearing in the list of available groups. What is the most likely issue?

Options :

A : The new prevention policy should be enabled first

B : Host type was not defined correctly within the prevention policy

C : The "Servers" group already has a policy applied to it

D : The "Servers" group must be disabled first

Answer: C