An analyst is asked to retrieve an API client secret from a previously generated key. How can they achieve this?
Answer(s): D
The API client secret cannot be retrieved after it has been created. The secret is only displayed once when the API client is created, and it cannot be viewed or edited later. Therefore, it is important to save the secret securely and use it along with the client ID to authenticate the API client. The other options are either incorrect or not possible.
CrowdStrike Falcon User Guide, page 54.
Which port and protocol does the sensor use to communicate with the CrowdStrike Cloud?
Answer(s): B
The sensor uses TCP port 443 (HTTPS) to communicate with the CrowdStrike Cloud. This port and protocol are used to securely send and receive data between the sensor and the cloud, such as detections, policies, updates, commands, etc. The other options are either incorrect or not used by the sensor.
CrowdStrike Falcon User Guide, page 28.
Where do you obtain the Windows sensor installer for CrowdStrike Falcon?
Answer(s): A
The Windows sensor installer for CrowdStrike Falcon can be downloaded from the Hosts > Sensor Downloads page in the Falcon console. This page allows you to download different sensor versions and installers for various operating systems and platforms, as well as view installation instructions and release notes. The other options are either incorrect or not available.
CrowdStrike Falcon User Guide, page 27.
What is the most common cause of a Windows Sensor entering Reduced Functionality Mode (RFM)?
The most common cause of a Windows Sensor entering Reduced Functionality Mode (RFM) is Microsoft updates. RFM occurs when the sensor detects a change in the operating system that requires a reboot to complete. Microsoft updates are one of the common causes of such a change. The other options are either incorrect or not related to RFM.
CrowdStrike Falcon User Guide, page 30.
On which page of the Falcon console would you create sensor groups?
The only place where create host groups is in " Host and setup management > host Groups> Create a group" In Sensor Update policies you can only asign a group of host to the policy not creating a group of hosts.
Post your Comments and Discuss CrowdStrike CCFA-200b exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CCFA-200b content, but please register or login to continue.