Scribd
Upload
107 views4 pages

Ccfa 200

Este es un quizz de prueba para certificación CEH

Uploaded by

Gabriel Soto
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
107 views4 pages

Ccfa 200

Este es un quizz de prueba para certificación CEH

Uploaded by

Gabriel Soto
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 4

VerifiedDumps

http://www.verifieddumps.com
Get the Valid and Verified Exam Questions & Answers Dump for 100% Pass
CCFA-200 Latest Exam Dumps & CCFA-200 Verified Study Torrent & CCFA-200 Practice Torrent Dumps
IT Certification Guaranteed, The Easy Way!

Exam : CCFA-200

Title : CrowdStrike Certified Falcon


Administrator

Vendor : CrowdStrike

Version : DEMO

CCFA-200 latest exam dumps, CCFA-200 verified study1 torrent, CCFA-200 practice torrent dumps
https://www.verifieddumps.com/CCFA-200-valid-exam-braindumps.html
CCFA-200 Latest Exam Dumps & CCFA-200 Verified Study Torrent & CCFA-200 Practice Torrent Dumps
IT Certification Guaranteed, The Easy Way!

NO.1 You need to export a list of all deletions for a specific Host Name in the last 24 hours. What is
the best way to do this?
A. In the Investigate module, access the Detection Activity page. Use the filters to focus on the
appropriate hostname and time, then export the results
B. Utilize the Detection Activity Dashboard. Use the filters to focus on the appropriate hostname and
time, then export the results from the "Detections by Host" section
C. Go to Host Management in the Host page. Select the host and use the Export Detections button
D. Utilize the Detection Resolution Dashboard. Use the filters to focus on the appropriate hostname
and time, then export the results from the "Detection Resolution History" section
Answer: A

NO.2 Where in the Falcon console can information about supported operating system versions be
found?
A. Discover module
B. Configuration module
C. Support module
D. Intelligence module
Answer: C

NO.3 You want the Falcon Cloud to push out sensor version changes but you also want to manually
control when the sensor version is upgraded or downgraded. In the Sensor Update policy, which is
the best Sensor version option to achieve these requirements?
A. Sensor version updates off
B. Specific sensor version number
C. Auto - N-1
D. Auto - TEST-QA
Answer: B

NO.4 Even though you are a Falcon Administrator, you discover you are unable to use the "Connect
to Host" feature to gather additional information which is only available on the host. Which role do
you need added to your user account to have this capability?
A. Endpoint Manager
B. Falcon Investigator
C. Remediation Manager
D. Real Time Responder
Answer: B

NO.5 When creating new IOCs in IOC management, which of the following fields must be
configured?
A. Hash, Platform and Action
B. Hash, Description, Filename
C. Filename, Severity and Expiry Date
D. Hash, Action and Expiry Date

CCFA-200 latest exam dumps, CCFA-200 verified study2 torrent, CCFA-200 practice torrent dumps
https://www.verifieddumps.com/CCFA-200-valid-exam-braindumps.html
CCFA-200 Latest Exam Dumps & CCFA-200 Verified Study Torrent & CCFA-200 Practice Torrent Dumps
IT Certification Guaranteed, The Easy Way!

Answer: A

NO.6 Which of the following Machine Learning (ML) sliders will only detect or prevent high
confidence malicious items?
A. Cautious
B. Minimal
C. Aggressive
D. Moderate
Answer: B

NO.7 How many "Auto" sensor version update options are available for Windows Sensor Update
Policies?
A. 0
B. 2
C. 1
D. 3
Answer: A

NO.8 The Falcon sensor uses certificate pinning to defend against man-in-the-middle attacks. Which
statement is TRUE concerning Falcon sensor certificate validation?
A. HTTPS interception should be enabled to proceed with certificate validation
B. SSL inspection should be configured to occur on all Falcon traffic
C. Common sources of interference with certificate pinning include protocol race conditions and
resource contention
D. Some network configurations, such as deep packet inspection, interfere with certificate validation
Answer: D

NO.9 To enhance your security, you want to detect and block based on a list of domains and IP
addresses. How can you use IOC management to help this objective?
A. Using IOC management, import the list of hashes and IP addresses and set the action to
Prevent/Block
B. Blocking of Domains and IP addresses is not a function of IOC management. A Custom IOA Rule
should be used instead
C. Using IOC management, import the list of hashes and IP addresses and set the action to Detect
Only
D. Using IOC management, import the list of hashes and IP addresses and set the action to No Action
Answer: A

CCFA-200 latest exam dumps, CCFA-200 verified study3 torrent, CCFA-200 practice torrent dumps
https://www.verifieddumps.com/CCFA-200-valid-exam-braindumps.html

You might also like