QUESTION: 13

Which role is required to manage groups and policies in Falcon?

Falcon Host Analyst
Falcon Host Administrator
Prevention Hashes Manager
Falcon Host Security Lead

Answer(s): B

Explanation:

The Falcon Host Administrator role is required to manage groups and policies in Falcon. This role allows users to create, edit and delete groups and policies, as well as assign them to hosts. The other roles do not have this capability.

Reference:

[CrowdStrike Falcon User Guide], page 17.

Reveal Solution Next Question

QUESTION: 14

Which of the following can a Falcon Administrator edit in an existing user's profile?

First or Last name
Phone number
Email address
Working groups

Answer(s): A

Explanation:

Roles are never called 'working groups' in the documentation. The only other option that can be edited on a existing user is first and last name.

Reveal Solution Next Question

QUESTION: 15

You want the Falcon Cloud to push out sensor version changes but you also want to manually control when the sensor version is upgraded or downgraded. In the Sensor Update policy, which is the best Sensor version option to achieve these requirements?

Specific sensor version number
Auto - TEST-QA
Sensor version updates off
Auto - N-1

Answer(s): A

Explanation:

The administrator can choose a specific sensor version number in the Sensor Update policy to manually control when the sensor version is upgraded or downgraded. This will allow the Falcon Cloud to push out sensor version changes, but only when the administrator changes the version number in the policy. The other options will either automate the sensor version updates or turn them off completely.

Reference:

[CrowdStrike Falcon User Guide], page 38.

Reveal Solution Next Question

QUESTION: 16

What is the goal of a Network Containment Policy?

Increase the aggressiveness of the assigned prevention policy
Limit the impact of a compromised host on the network
Gain more visibility into network activities
Partition a network for privacy

Answer(s): B

Explanation:

The goal of a Network Containment Policy is to limit the impact of a compromised host on the network. This policy allows users to isolate a host from the network, while still allowing it to communicate with the Falcon Cloud and other essential services. This can help prevent further damage or data exfiltration from a compromised host. The other options are either incorrect or not related to the policy.

Reference:

[CrowdStrike Falcon User Guide], page 40.

Reveal Solution Next Question

Free CCFA-200 Exam Braindumps (page: 5)

QUESTION: 13

Explanation:

Reference:

QUESTION: 14

Explanation:

QUESTION: 15

Explanation:

Reference:

QUESTION: 16

Explanation:

Reference:

CCFA-200 Discussions & Posts