Free CrowdStrike CCFA-200b Exam Dumps Questions & Answers

What prevention policy setting prevents sensor-related files, folders, and registry objects from being renamed or deleted?

• A.  Sensor Tampering Protection
• B.  Host Modification Protection
• C.  System Configuration Protection
• D.  Sensor Modification Protection

What default user role can manage API credentials?

• A.  Falcon Security Lead
• B.  Endpoint Manager
• C.  Falcon Administrator
• D.  Falcon API Manager

You want to add an additional layer of security to high-risk Real Time Response commands for your environment. Where do you configure MFA for RTR within the UI?

• A.  General settings
• B.  Response policies
• C.  Containment policy
• D.  Notifications

What are the components that must be allowed to manually install Falcon Sensor on macOS?

• A.  System extension, Full Disk Access, and Network filter extension
• B.  Full Disk Access and System extension only
• C.  Network filter extension and Full Disk Access only
• D.  Network filter extension and System extension only

Which setting inside the Sensor Update Policy prevents unauthorized uninstallation?

• A.  Update and Management Protection
• B.  Sensor Version Control Protection
• C.  Installation and Maintenance Protection
• D.  Uninstall and Maintenance Protection