Free CCFA Crowdstrike CCFA Practice Test Question

Loading demo links...

Showing 10–12 of 24 questions

Question 10 (Topic 1)

What is the primary purpose of using glob syntax in an exclusion?

Select an option, then click Submit answer.

  • To specify a Domain be excluded from detections
  • To specify exclusion patterns to easily exclude files and folders and extensions from detections
  • To specify exclusion patterns to easily add files and folders and extensions to be prevented
  • To specify a network share be excluded from detections
Question 11 (Topic 1)

How are user permissions set in Falcon?

Select an option, then click Submit answer.

  • Permissions are assigned to a User Group and then users are assigned to that group, thereby inheriting those permissions
  • Pre-defined permissions are assigned to sets called roles. Users can be assigned multiple roles based on job function and they assume a cumulative set of permissions based on those assignments
  • An administrator selects individual granular permissions from the Falcon Permissions List during user creation
  • Permissions are token-based. Users request access to a defined set of permissions and an administrator adds their token to the set of permissions
Question 12 (Topic 1)

You have a Windows host on your network in Reduced functionality mode (RFM). While the system is in RFM, which of the following is TRUE?

Select an option, then click Submit answer.

  • System monitoring will be unavailable
  • Event reporting will be unavailable
  • Prevention patterns will not be triggered
  • Some detection patterns and preventions will not be triggered