← Back to exam page

Free CCFA – Crowdstrike CCFA Practice Test Question

Loading demo links...

Showing 19–21 of 24 questions

Question 19 (Topic 1)

What sensor update policy will a sensor receive if it does not have a host group assignment?

Select an option, then click Submit answer.

  • ○ Auto N-2 policy
  • ○ They don’t get a policy
  • ○ The default policy
  • ○ Auto N-1 policy
Question 20 (Topic 1)

What information is provided in “Remote or network Logon Activities” under Visibility Reports?

Select an option, then click Submit answer.

  • ○ A list of all logons for all users
  • ○ A list of last endpoints that a user logged in to
  • ○ A list of users who are remotely logged on to devices based on local IP and local port
  • ○ A list of unique users who are remotely logged on to devices based on the country
Question 21 (Topic 1)

What default roles can view, create, and edit workflows?

Select an option, then click Submit answer.

  • ○ Falcon Administrator, Falcon Security Lead
  • ○ Falcon Administrator, Workflow Author
  • ○ Falcon Administrator, Falcon Security Lead, Workflow Author
  • ○ Falcon Administrator, Workflow Author, Falcon Security Lead, Falcon Investigator