CrowdStrike Certified Falcon Administrator - CCFA-200 Free Exam Questions

A. CSUninstallTool.exe

B. CrowdStrikeRemovalTool.exe

C. FalconUninstall.exe

D. UninstallTool.exe

A. Shows a graphical view of user logon activity and the hosts the user connected to

B. The report can be filtered by computer name

C. It gives a detailed list of all logon activity for users

D. It only gives a summary of the last logon activity for users

A. \Program Files\My Program\My Files\*

B. *\*

C. *\Program Files\My Program\*\

D. \Program Files\My Program\*

A. There is no such option as No Action available in the Falcon console

B. When you want to save the indicator for later action, but do not want to block or allow it at this time

C. Add the indicator to your blocklist and show it as a detection

D. Add the indicator to your allowlist and do not detect it

A. A list of analyst login activity

B. A list of newly added hosts

C. A list of specific changes to prevention policy

D. A list of actions taken via Falcon OAuth2-based APIs

A. Sensor Visibility Exclusion

B. IOC Exclusions

C. IOA Exclusions

D. Machine Learning Exclusions

A. The user never configured their security questions

B. The SSO username doesn't match their email address in Falcon

C. The maintenance token has expired

D. Falcon is in reduced functionality mode

A. \Device\HarddiskVolume2\*.exe -SingleArgument www.badguydomain.com /kill

B. badguydomain\.com.*

C. .*badguydomain.com.*

D. Custom IOA rules cannot be created for domains

A. Existing detections for the host remain, but no new detections will display in the console going forward

B. You cannot disable detections for a host

C. Preventions will be disabled for the host

D. The detections for the host are removed from the console immediately and no new detections will display in the console going forward

A. Behavior-Based Threat Prevention sliders and Advanced Remediation Actions must be enabled

B. Next-Gen Antivirus Prevention sliders and "Quarantine & Security Center Registration" must be enabled

C. Malware Protection and Windows Anti-Malware Execution Blocking must be enabled

D. Malware Protection and Custom Execution Blocking must be enabled