Free CrowdStrike CCCS-203b Exam Dumps Questions & Answers

You are reviewing user accounts in your organization using the CrowdStrike CIEM/Identity Analyzer. Which of the following scenarios represents the correct method to identify an inactive user?

• A.  A user who has logged in twice in the past week but has not used any IAM role or resource permissions.
• B.  A user with no logins or API activity in the last 30 days but with active IAM roles assigned.
• C.  A user who recently logged in and modified IAM policies but has minimal activity in other resources.
• D.  A user who has no recorded login activity for the past 90 days and has no active API tokens.

Which action is required when creating a new image registry connection that accesses a privately hosted registry?

• A.  Verify the registry URL
• B.  Verify the token and secret
• C.  Confirm expiration date of the secret for any used service accounts
• D.  Add CrowdStrike IP addresses to registry allowlists

While using Falcon's Image Assessment feature, you want to prioritize scanning images for critical vulnerabilities before deployment.
Which configuration option should you use to achieve this goal?

• A.  Set the Scan Rule in Cloud Workload Protection to include only images with high CVSS scores and exclude others.
• B.  Use the Image Scan Priority feature in Falcon's Prevention Policies to focus on high-severity CVEs.
• C.  Enable Real-Time Scan Prioritization in the registry integration settings to target critical vulnerabilities.
• D.  Adjust the Scan Scope in Image Assessment to include all images but only flag vulnerabilities with a CVSS score of 7 or higher.

What is a key benefit of Falcon Cloud Security's integration of its components within a single platform?

• A.  It eliminates the need for traditional SIEM tools by storing all security logs in the Falcon platform.
• B.  It reduces the need for manual threat analysis by leveraging AI-powered threat detection and response.
• C.  It allows for seamless encryption of all cloud data, ensuring compliance with GDPR and CCPA.
• D.  It provides a built-in firewall to secure cloud environments against external attacks.

When configuring an automated remediation workflow for AWS findings in Falcon Fusion, why is it important to perform a dry run before enabling the workflow in production?

• A.  To bypass the need for permissions validation during configuration.
• B.  To apply changes to a limited number of AWS resources for testing.
• C.  To generate a compliance report highlighting unresolved findings.
• D.  To simulate the workflow actions without making changes to validate the logic and outcomes.