Question 1

You are registering a new AWS account with CrowdStrike Falcon, but the process fails with an error stating:"Insufficient permissions for role ARN." What is the most likely cause of this issue?

Options :

A : The IAM role created for the account lacks the required policies for CrowdStrike integration.

B : The AWS account is already registered with another CrowdStrike instance.

C : The CrowdStrike Falcon sensor is not installed on the EC2 instances in the account.

D : Multi-factor authentication (MFA) is disabled on the AWS account.

Answer: A

Question 2

After identifying excessive permissions and missing MFA in IAM configurations, which remediation strategy is most aligned with CrowdStrike CIEM’s recommendations?

Options :

A : Delete all accounts flagged by CIEM’s Identity Analyzer.

B : Enable MFA and implement least privilege access policies for the flagged accounts.

C : Revoke all permissions from the identified accounts.

D : Transfer ownership of flagged accounts to a different administrator.

Answer: B

Question 3

Which feature of the CrowdStrike Identity Analyzer enables administrators to determine the last time a specific user changed their password across the cloud infrastructure?

Options :

A : Last Password Change Tracker

B : Password Policy Manager

C : Identity Change Log

D : Access Key Analyzer

Answer: A

Question 4

Which step is essential when registering a cloud account in Falcon Cloud Security?

Options :

A : Enabling API access and permissions to allow CrowdStrike to monitor the account.

B : Deploying the Falcon agent on all instances in the account before registration.

C : Configuring automatic backup settings for all cloud resources.

D : Configuring network firewalls to route all traffic through CrowdStrike-s servers.

Answer: A

Question 5

While editing the cloud security posture policy in Falcon to enhance compliance with industry standards, you notice a rule that detects misconfigured IAM roles in your AWS environment. What action should you configure for this rule to prevent unauthorized access effectively?

Options :

A : Set the action to "Alert" and notify the security operations team.

B : Enable auto-remediation to delete all misconfigured IAM roles immediately.

C : Add a condition to the rule requiring all IAM roles to use least-privilege policies.

D : Set the action to "Monitor Only" to track usage of the misconfigured roles.

Answer: C

Confidently Practice Online with Free CrowdStrike-Cloud Exam Cram

Buying Options: