Which of the following is NOT a way to determine the sensor version installed on a specific endpoint?

• A.Use the Sensor Report to filter to the specific endpoint
• B.Use the Investigate > Host Search to filter to the specific endpoint
• C.Use Host Management to select the desired endpoint. The agent version will be listed in the columns and details
• D.From a command line, run the sc query csagent -version command

Comment: *

Name: *

Email: *

Verification: *

Which role allows a Falcon user to create Real Time Response Custom Scripts?

• A.Real Time Responder - Active Responder
• B.Real Time Responder - Administrator
• C.Real Time Responder - Read Only Analyst
• D.Real Time Responder - Script Developer

Comment: *

Name: *

Email: *

Verification: *

What is the best way to write an ML exclusion for any executable file at "C:\Program Files\Software\"?

• A.Program Files\Software\*.exe
• B.You cannot. You must list a specific file in an exclusion rule
• C.Program Files\Software\**
• D.Program Files\Software\.*

Comment: *

Name: *

Email: *

Verification: *

After enabling an IOA rule and its respective rule group, what else must be done for an IOA to be fully functional?

• A.You must individually select which hosts you would like to apply to rule to
• B.The rule needs to be manually triggered to ensure it works as intended
• C.Nothing else needs to be done; the rule should start working
• D.The rule group must be assigned to one or more prevention policies

Comment: *

Name: *

Email: *

Verification: *

Which role is required to manage groups and policies in Falcon?

• A.Falcon Host Administrator
• B.Falcon Host Analyst
• C.Prevention Hashes Manager
• D.Falcon Host Security Lead

Comment: *

Name: *

Email: *

Verification: *