CCFA-200 V4

Which of the following is a valid step when troubleshooting sensor installation failure?A . Confirm all required services are running on the systemB . Enable the Windows firewallC . Disable SSL and TLS on the hostD . Delete any available application crash log filesView AnswerAnswer: A

What is the primary purpose of using glob syntax in an exclusion?A . To specify a Domain be excluded from detectionsB . To specify exclusion patterns to easily exclude files and folders and extensions from detectionsC . To specify exclusion patterns to easily add files and folders and extensions to...

Which exclusion pattern will prevent detections on a file at C:Program FilesMy ProgramMy Filesprogram.exe?A . Program FilesMy ProgramMy Files*B . Program FilesMy Program*C . **D . *Program FilesMy Program*View AnswerAnswer: A

When uninstalling a sensor, which of the following is required if the 'Uninstall and maintenance protection' setting is enabled within the Sensor Update Policies?A . Maintenance tokenB . Customer ID (CID)C . Bulk update keyD . Agent ID (AID)View AnswerAnswer: A

Under which scenario can Sensor Tags be assigned?A . While triaging a detectionB . While managing hosts in the Falcon consoleC . While updating a sensor in the Falcon consoleD . While installing a sensorView AnswerAnswer: D

How many "Auto" sensor version update options are available for Windows Sensor Update Policies?A . 1B . 2C . 0D . 3View AnswerAnswer: D

On a Windows host, what is the best command to determine if the sensor is currently running?A . sc query csagentB . netstat -aC . This cannot be accomplished with a commandD . ping falcon.crowdstrike.comView AnswerAnswer: A

What is the purpose of using groups with Sensor Update policies in CrowdStrike Falcon?A . To group hosts with others in the same business unitB . To group hosts according to the order in which Falcon was installed, so that updates are installed in the same order every timeC ....

What information is provided in Logan Activities under Visibility Reports?A . A list of all logons for all usersB . A list of last endpoints that a user logged in toC . A list of users who are remotely logged on to devices based on local IP and local portD...

How long are detection events kept in Falcon?A . Detection events are kept for 90 daysB . Detections events are kept for your subscribed data retention periodC . Detection events are kept for 7 daysD . Detection events are kept for 30 daysView AnswerAnswer: A