CrowdStrike CCFA-200b Actual Free Exam Questions & Community Discussion

Excluding mobile devices, what kind of hosts can be contained in Falcon?

Where would you apply a configuration to allow IP addresses over which your hosts will always be allowed to communicate, even if a host is contained?

What is the recommended approach for managing host groups over time?

Which setting inside the Sensor Update Policy prevents unauthorized uninstallation?

To test a new Falcon sensor version, you have created a new sensor update policy and two separate dynamic host groups. One group contains all test Windows servers. The other group contains all of your Windows servers. The new policy was applied to only the test Windows servers host group. What is required to safely and successfully test your new sensor update policy on only your test Windows servers?

A member of your SECOPS team is building custom scripts for RTR, but they are unable to save or share them in Falcon. What additional role do they need?

After successfully installing Falcon on a new employee's laptop, you notice that the machine is assigned the default prevention policy instead of the custom prevention policy you created. You verify that the Falcon sensor is functioning properly, and you confirm that the custom policy is enabled and successfully running on more than 1,000 other Falcon hosts. What is the likely cause of this issue?

What action should you take to securely allow operating system update processes to occur during network containment?

An inactive host does not contact the Falcon cloud. What is the default number of days after which it is automatically removed from the Host Management page?