Question 1

What is the primary purpose of creating Falcon Cloud Security Policies and Rules in a cloud environment?

Options :

A : To configure network ingress and egress rules for cloud-native firewalls.

B : To enforce granular security controls for workloads, users, and cloud resources based on predefined conditions.

C : To manage the deployment of Falcon agents across virtual machines.

D : To automate software updates for containerized applications in the cloud.

Answer: B

Question 2

Which component of Falcon Fusion is primarily responsible for automating responses to detected threats within a cloud environment?

Options :

A : Workflow Builder

B : Event Correlation Dashboard

C : Custom Alerts Manager

D : Threat Intelligence Orchestrator

Answer: A

Question 3

You are tasked with creating a new Kubernetes Admission Controller policy in Falcon Cloud Security. What is the primary purpose of this policy?

Options :

A : To control and enforce security configurations at the time of resource creation or update in Kubernetes.

B : To provide real-time alerts for unauthorized API calls in the Kubernetes control plane.

C : To monitor network traffic within Kubernetes clusters for malicious activity.

D : To scan container images for vulnerabilities after deployment.

Answer: A

Question 4

A company wants to create a Falcon Sensor policy to enforce strict monitoring on critical servers. What is an essential configuration step for the policy?

Options :

A : Configure prevention settings such as "Exploit Mitigation" and "Malware Prevention" for the policy.

B : Set the policy mode to "Detection Only" for all servers.

C : Add the policy under the "Sensor Exclusions" tab in the Falcon Console.

D : Assign the policy to the "Default Group" to ensure global coverage.

Answer: A

Question 5

You are registering a new AWS account with CrowdStrike Falcon, but the process fails with an error stating:

"Insufficient permissions for role ARN."

What is the most likely cause of this issue?

Options :

A : The IAM role created for the account lacks the required policies for CrowdStrike integration.

B : The AWS account is already registered with another CrowdStrike instance.

C : The CrowdStrike Falcon sensor is not installed on the EC2 instances in the account.

D : Multi-factor authentication (MFA) is disabled on the AWS account.

Answer: A

Confidently Practice Online with Free CrowdStrike-Cloud Exam Cram

Buying Options: