Which role allows a user to connect to hosts using Real-Time Response?

• A.Real Time Responder - Active Responder
• B.Endpoint Manager
• C.Falcon Administrator
• D.Prevention Hashes Manager

Comment: *

Name: *

Email: *

Verification: *

You have an existing workflow that is triggered on a critical detection that sends an email to the escalation team. Your CISO has asked to also be notified via email with a customized message. What is the best way to update the workflow?

• A.Clone the workflow and replace the existing email with your CISO's email
• B.Add a sequential action to send a custom email to your CISO
• C.Add a parallel action to send a custom email to your CISO
• D.Add the CISO's email to the existing action

Comment: *

Name: *

Email: *

Verification: *

Your organization has a set of servers that are not allowed to be accessed remotely, including via Real Time Response (RTR). You already have these servers in their own Falcon host group. What is the next step to disable RTR only on these hosts?

• A.Edit the Default Response Policy, toggle the "Real Time Response" switch off and assign the policy to the host group
• B.Create a new Response Policy and add the host name to the exceptions list under "Real Time Functionality"
• C.Edit the Default Response Policy and add the host group to the exceptions list under "Real Time Functionality"
• D.Create a new Response Policy, toggle the "Real Time Response" switch off and assign the policy to the host group

Comment: *

Name: *

Email: *

Verification: *

Which of the following tools developed by Crowdstrike is intended to help with removal of the CrowdStrike Windows Falcon Sensor?

• A.CrowdStrikeRemovalTool.exe
• B.UninstallTool.exe
• C.CSUninstallTool.exe
• D.FalconUninstall.exe

Comment: *

Name: *

Email: *

Verification: *

Which of the following scenarios best describes when you would add IP addresses to the containment policy?

• A.You want to automate the Network Containment process based on the IP address of a host
• B.Your organization has additional IP addresses that need to be able to access the Falcon console
• C.A new group of analysts need to be able to place hosts under Network Containment
• D.Your organization has resources that need to be accessible when hosts are network contained

Comment: *

Name: *

Email: *

Verification: *