← Back to exam page

Free CCFA – Crowdstrike CCFA Practice Test Question

Loading demo links...

Showing 7–9 of 24 questions

Question 7 (Topic 1)

How can a Falcon Administrator configure a pop-up message to be displayed on a host when the Falcon sensor blocks, kills or quarantines an activity?

Select an option, then click Submit answer.

  • ○ By ensuring each user has set the "pop-ups allowed" in their User Profile configuration page
  • ○ By enabling "Upload quarantined files" in the General Settings configuration page
  • ○ By turning on the "Notify End Users" setting at the top of the Prevention policy details configuration page
  • ○ By selecting "Enable pop-up messages" from the User configuration page
Question 8 (Topic 1)

What is the name for the unique host identifier in Falcon assigned to each sensor during sensor installation?

Select an option, then click Submit answer.

  • ○ Endpoint ID (EID)
  • ○ Agent ID (AID)
  • ○ Security ID (SID)
  • ○ Computer ID (CID)
Question 9 (Topic 1)

An analyst has reported they are not receiving workflow triggered notifications in the past few days. Where should you first check for potential failures?

Select an option, then click Submit answer.

  • ○ Custom Alert History
  • ○ Workflow Execution log
  • ○ Workflow Audit log
  • ○ Falcon UI Audit Trail