CCFA-200 exam

How many "Auto" sensor version update options are available for Windows Sensor Update Policies?A . 1B . 2C . 0D . 3View AnswerAnswer: D

Under which scenario can Sensor Tags be assigned?A . While triaging a detectionB . While managing hosts in the Falcon consoleC . While updating a sensor in the Falcon consoleD . While installing a sensorView AnswerAnswer: D

What type of information is found in the Linux Sensors Dashboard?A . Hosts by Kernel Version, Shells spawned by Root, Wget/Curl UsageB . Hidden File execution, Execution of file from the trash, Versions Running with ComputerNamesC . Versions running, Directory Made Invisible to Spotlight, Logging/Auditing Referenced, Viewed, or ModifiedD ....

What is the most common cause of a Windows Sensor entering Reduced Functionality Mode (RFM)?A . Falcon console updates are pendingB . Falcon sensors installing an updateC . Notifications have been disabled on that host sensorD . Microsoft updatesView AnswerAnswer: D

How long are detection events kept in Falcon?A . Detection events are kept for 90 daysB . Detections events are kept for your subscribed data retention periodC . Detection events are kept for 7 daysD . Detection events are kept for 30 daysView AnswerAnswer: B

How do you find a list of inactive sensors?A . The Falcon platform does not provide reporting for inactive sensorsB . A sensor is always considered active until removed by an AdministratorC . Run the Inactive Sensor Report in the Host setup and management optionD . Run the Sensor Aging...

Which of the following is a valid step when troubleshooting sensor installation failure?A . Confirm all required services are running on the systemB . Enable the Windows firewallC . Disable SSL and TLS on the hostD . Delete any available application crash log filesView AnswerAnswer: A

Where do you obtain the Windows sensor installer for CrowdStrike Falcon?A . Sensors are downloaded from the Hosts > Sensor DownloadsB . Sensor installers are unique to each customer and must be obtained from supportC . Sensor installers are downloaded from the Support section of the CrowdStrike websiteD . Sensor...

How are user permissions set in Falcon?A . Permissions are assigned to a User Group and then users are assigned to that group, thereby inheriting those permissionsB . Pre-defined permissions are assigned to sets called roles. Users can be assigned multiple roles based on job function and they assume a...

What is the primary purpose of using glob syntax in an exclusion?A . To specify a Domain be excluded from detectionsB . To specify exclusion patterns to easily exclude files and folders and extensions from detectionsC . To specify exclusion patterns to easily add files and folders and extensions to...