CrowdStrike Certified Cloud Specialist - CCCS-203b Free Exam Questions

A. Monitors and enforces security policies in any containerized environment

B. Provides security visibility into EKS, AKS, and self-managed clusters

C. Forwards Kubernetes event logs to CrowdStrike NG SIEM

A. Select a limited scope of affected resources to prevent wide-scale simulation

B. Schedule the dry run to occur only during off-peak hours

C. Integrate third-party tools for enhanced dry run reporting

D. Enable enforcement mode to simulate real-world remediation

A. The Falcon sensor requires the iptables package, which is missing on the server.

B. The Falcon sensor requires Docker to be installed on the Linux server.

C. The Linux server's firewall is blocking communication with CrowdStrike cloud endpoints.

D. The Linux server is running a kernel version not compatible with the Falcon sensor.

A. Relying on the image author's documentation to identify vulnerabilities.

B. Checking for updates to the container orchestration platform.

C. Comparing the image against a trusted, verified base image.

D. Running a static analysis scan on the container image.

A. Define the "PodSecurityPolicy" manifest in Kubernetes.

B. Apply the Admission Controller policy via a Helm chart.

C. Use the Falcon Cloud Security Console to create a policy in the Admission Controller Policies section.

D. Configure the policy directly in the Kubernetes cluster's kube-apiserver.

A. Enabling network-level access for Falcon agents on all virtual machines.

B. Providing direct SSH access to all virtual machines in the account.

C. Assigning full administrative access to the Falcon integration user.

D. Configuring a service account with specific permissions for monitoring.

A. Schedule assessments for each cloud account individually to avoid overlaps.

B. Use default settings without reviewing scope and frequency, as they are pre-optimized by CrowdStrike.

C. Configure assessments at a frequency that aligns with compliance or business requirements.

D. Run assessments only during off-peak hours to avoid performance degradation in cloud resources.

A. The Falcon Sensor was installed on the host but not configured for container visibility.

B. The host machine does not meet the minimum hardware requirements for Falcon Sensor deployment.

C. The Kubernetes cluster lacks internet connectivity to communicate with the Falcon Cloud.

D. The Falcon Sensor version does not support containerized environments.

A. Filter container assets by container running status and detection remediation

B. Filter image vulnerabilities by container running status and remediation

C. Filter image detections by container running status and remediation

D. Filter container assets by container running status and vulnerability remediation

A. A dedicated IAM role or user with the appropriate permissions must be created and configured for integration.

B. The cloud account must have administrator-level access to all resources within the environment.

C. The Falcon agent must be installed on all virtual machines in the cloud account before registration.

D. All cloud account users must be enrolled in Falcon platform authentication prior to registration.

A. The Admission Controller must be deployed as a Custom Resource Definition (CRD).

B. The Admission Controller requires direct integration with the underlying host operating system kernel.

C. Role-Based Access Control (RBAC) must be configured to grant the Admission Controller permissions to intercept and modify API requests.

D. Pod-level annotations must be added to all running workloads.