CrowdStrike CCFA-200b - CrowdStrike Certified Falcon Administrator Exam
Page: 3 / 31
Total 153 questions
Question #11 (Topic: Exam A)
Excluding mobile devices, what kind of hosts can be contained in Falcon?
A. Windows and MacOS hosts running the Falcon sensor
B. Windows and Linux hosts running the Falcon sensor
C. Windows, Linux, and container hosts running the Falcon sensor
D. Windows, Linux, and MacOS hosts running the Falcon sensor
Answer: D
Question #12 (Topic: Exam A)
Where can you find a list of hosts that have not communicated with the CrowdStrike Cloud?
A. Inactive Sensors
B. Disabled Sensors
C. Sensor Report
D. Custom Reports
Answer: A
Question #13 (Topic: Exam A)
What uses Regex to create a detection or take a preventative action?
A. Custom IOC
B. Sensor Visibility Exclusion
C. Custom IOA
D. Machine Learning Exclusion
Answer: A
Question #14 (Topic: Exam A)
You can create Fusion SOAR workflows to precisely define the actions you want Falcon to perform in response to incidents.
Which three items must be defined in every trigger so that it executes successfully?
Which three items must be defined in every trigger so that it executes successfully?
A. Trigger, Condition, Action
B. Rule Type, Condition, Action
C. Rule Type, Filter, Objective
D. Trigger, Filter, Objective
Answer: B
Question #15 (Topic: Exam A)
You have created a new static host group to test a newly created sensor update policy, and need to add 500 servers into the group. You want to upload a list of hosts to Falcon for automatic addition into the group.
What file format must the list be for this to be successfully accomplished?
What file format must the list be for this to be successfully accomplished?
A. XLSX
B. PDF
C. TXT
D. JSON
Answer: C
