Updated Free CrowdStrike CCFA-200 Test Engine Questions with 152 Q&As [Q58-Q74]

4.5/5 - (2 votes)

Updated Free CrowdStrike CCFA-200 Test Engine Questions with 152 Q&As

The Best CrowdStrike Certified Falcon Administrator CCFA-200 Professional Exam Questions

QUESTION 58
You are attempting to install the Falcon sensor on a host with a slow Internet connection and the installation fails after 20 minutes. Which of the following parameters can be used to override the 20 minute default provisioning window?

ExtendedWindow=1

Timeout=0

ProvNoWait=1

Timeout=30

QUESTION 59
Which role is required to manage groups and policies in Falcon?

Falcon Host Analyst

Falcon Host Administrator

Prevention Hashes Manager

Falcon Host Security Lead

QUESTION 60
How do you assign a policy to a specific group of hosts?

Create a group containing the desired hosts using “Static Assignment.” Go to the Assigned Host Groups tab of the desired policy and dick “Add groups to policy.” Select the desired Group(s).

Assign a tag to the desired hosts in Host Management. Create a group with an assignment rule based on that tag. Go to the Assignment tab of the desired policy and click “Add Groups to Policy.” Select the desired Group(s).

Create a group containing the desired hosts using “Dynamic Assignment.” Go to the Assigned Host Groups tab of the desired policy and select criteria such as OU, OS, Hostname pattern, etc.

On the Assignment tab of the desired policy, select “Static” assignment. From the next window, select the desired hosts (using fitters if needed) and click Add.

QUESTION 61
An analyst is asked to retrieve an API client secret from a previously generated key. How can they achieve this?

The API client secret can be viewed from the Edit API client pop-up box

Enable the Client Secret column to reveal the API client secret

Re-create the API client using the exact name to see the API client secret

The API client secret cannot be retrieved after it has been created

QUESTION 62
Which of the following roles allows a Falcon user to create Real Time Response Custom Scripts?

Real Time Responder – Administrator

Real Time Responder – Read Only Analyst

Real Time Responder – Script Developer

Real Time Responder – Active Responder

QUESTION 63
What will happen to a host if it is not assigned a Sensor Update policy?

The host will uninstall the Sensor and provide an alert to the installation team

The host will automatically update to the newest sensor version and auto-update to future release

The host will automatically create a custom Sensor Update policy

The host will use the Default Sensor Update policy

QUESTION 64
Which of the following can a Falcon Administrator edit in an existing user’s profile?

First or Last name

Phone number

Email address

Working groups

QUESTION 65
Which of the following options is a feature found ONLY with the Sensor-based Machine Learning (ML)?

Next-Gen Antivirus (NGAV) protection

Adware and Potentially Unwanted Program detection and prevention

Real-time offline protection

Identification and analysis of unknown executables

QUESTION 66
What statement is TRUE about managing a user’s role?

The Administrator cannot re-use the account email for a new account

You must have Falcon MFA enabled first

You must be a Falcon Security Lead

You must be a Falcon Administrator

QUESTION 67
Which of the following Machine Learning (ML) sliders will only detect or prevent high confidence malicious items?

Aggressive

Cautious

Minimal

Moderate

QUESTION 68
You need to export a list of all deletions for a specific Host Name in the last 24 hours. What is the best way to do this?

Go to Host Management in the Host page. Select the host and use the Export Detections button

Utilize the Detection Resolution Dashboard. Use the filters to focus on the appropriate hostname and time, then export the results from the “Detection Resolution History” section

In the Investigate module, access the Detection Activity page. Use the filters to focus on the appropriate hostname and time, then export the results

Utilize the Detection Activity Dashboard. Use the filters to focus on the appropriate hostname and time, then export the results from the “Detections by Host” section

QUESTION 69
You have a Windows host on your network in Reduced functionality mode (RFM). While the system is in RFM, which of the following is TRUE?

System monitoring will be unavailable

Event reporting will be unavailable

Prevention patterns will not be triggered

Some detection patterns and preventions will not be triggered

QUESTION 70
How do you disable all detections for a host?

Create an exclusion rule and apply it to the machine or group of machines

Contact support and provide them with the Agent ID (AID) for the machine and they will put it on the Disabled Hosts list in your Customer ID (CID)

You cannot disable all detections on individual hosts as it would put them at risk

In Host Management, select the host and then choose the option to Disable Detections

QUESTION 71
Which of the following is an effective Custom IOA rule pattern to kill any process attempting to access www.badguydomain.com?

.*badguydomain.com.*

DeviceHarddiskVolume2*.exe -SingleArgument www.badguydomain.com /kill

badguydomain.com.*

Custom IOA rules cannot be created for domains

QUESTION 72
After agent installation, an agent opens a permanent___connection over port 443 and keeps that connection open until the endpoint is turned off or the network connection is terminated.

SSH

TLS

HTTP

TCP

QUESTION 73
Which of the following is NOT an available filter on the Hosts Management page?

Hostname

Username

Group

OS Version

QUESTION 74
Why is it critical to have separate sensor update policies for Windows/Mac/*nix?

There may be special considerations for each OS

To assist with testing and tracking sensor rollouts

The network protocols are different for each host OS

It is an auditing requirement

Try 100% Updated CCFA-200 Exam Questions [2024]: https://www.trainingquiz.com/CCFA-200-practice-quiz.html

CCFH-202 Exam Dumps – Try Best CCFH-202 Exam Questions from Training Expert TrainingQuiz Practice Examples and Dumps & Tips for

Quiz Training Materials

Updated Free CrowdStrike CCFA-200 Test Engine Questions with 152 Q&As [Q58-Q74]

CCFH-202 Exam Dumps – Try Best CCFH-202 Exam Questions from Training Expert TrainingQuiz [Q21-Q39]

Leave a Reply Cancel reply

Quiz Training Materials

Updated Free CrowdStrike CCFA-200 Test Engine Questions with 152 Q&As [Q58-Q74]

You May Also Like...

CCFH-202 Exam Dumps – Try Best CCFH-202 Exam Questions from Training Expert TrainingQuiz [Q21-Q39]

Leave a Reply Cancel reply