← Back to exam page

Free CCFA – Crowdstrike CCFA Practice Test Question

Loading demo links...

Showing 22–24 of 24 questions

Question 22 (Topic 1)

A member of your SECOPS team currently has the role of Falcon Security Lead to be able to Manage detections, quarantine files and reset user credentials. Which additional role is required to also allow them to view and modify remediation actions?

Select an option, then click Submit answer.

  • ○ Detections Exception Manager
  • ○ Remediation Manager
  • ○ Endpoint Manager
  • ○ Quarantine Manager
Question 23 (Topic 1)

In order to prevent duplicate Agent IDs, what install parameter should be used on VMs to be used as persistent clones?

Select an option, then click Submit answer.

  • ○ ProvNoWait=1
  • ○ /quiet
  • ○ VM=True
  • ○ NO_START=1
Question 24 (Topic 1)

You want to add an additional layer of security to high-risk RTR commands for your environment. Where would you configure MFA for RTR within the UI?

Select an option, then click Submit answer.

  • ○ Containment policy
  • ○ General settings
  • ○ Host group
  • ○ Response policies