Question 1

When integrating an AWS cloud account with CrowdStrike Falcon, which of the following permissions must the dedicated IAM role include?

Options :

A : Write access to modify security groups and IAM roles in the AWS account.

B : Permissions to read EC2 metadata, CloudTrail logs, and list S3 buckets.

C : Access to create new virtual machines for deploying the Falcon agent.

D : Full administrative access to the AWS account to manage all resources.

Answer: B

Question 2

Which feature of the CrowdStrike Identity Analyzer enables administrators to determine the last time a specific user changed their password across the cloud infrastructure?

Options :

A : Last Password Change Tracker

B : Password Policy Manager

C : Identity Change Log

D : Access Key Analyzer

Answer: A

Question 3

Which component of Falcon Fusion is primarily responsible for automating responses to detected threats within a cloud environment?

Options :

A : Workflow Builder

B : Event Correlation Dashboard

C : Custom Alerts Manager

D : Threat Intelligence Orchestrator

Answer: A

Question 4

A security team is tasked with creating an image assessment policy in the Falcon Cloud to scan container images for vulnerabilities before deployment. Which of the following configurations is required to ensure the policy works as intended?

Options :

A : Enable the "Audit Mode" to enforce runtime image assessment.

B : Enable the "Real-time Scanning" option to automatically block all unscanned images.

C : Assign the policy to a specific Kubernetes namespace only.

D : Specify the severity levels (e.g., Critical, High, Medium) for vulnerabilities to flag.

Answer: D

Question 5

You are tasked with creating a new Kubernetes Admission Controller policy in Falcon Cloud Security. What is the primary purpose of this policy?

Options :

A : To control and enforce security configurations at the time of resource creation or update in Kubernetes.

B : To provide real-time alerts for unauthorized API calls in the Kubernetes control plane.

C : To monitor network traffic within Kubernetes clusters for malicious activity.

D : To scan container images for vulnerabilities after deployment.

Answer: A

Confidently Practice Online with Free CrowdStrike-Cloud Exam Cram

Buying Options: