Free Practice CrowdStrike CCFA-200 Exam Questions 2025

Stay ahead with 100% Free CrowdStrike Certified Falcon Administrator CCFA-200 Dumps Practice Questions

Page: 1 / 33

Total 164 Questions | Updated On: Jan 26, 2025

Add To Cart

Question 1

While a host is Network contained, you need to allow the host to access internal network resources on specific IP addresses to perform patching and remediation. Which configuration would you choose?

A : Configure a Real Time Response policy allowlist with the specific IP addresses

B : Configure a Containment Policy with the specific IP addresses

C : Configure a Containment Policy with the entire internal IP CIDR block

D : Configure the Host firewall to allowlist the specific IP addresses

Answer: D

Question 2

What are custom alerts based on?

A : Custom workflows

B : Custom event based triggers

C : Predefined alert templates

D : User defined Splunk queries

Answer: B

Question 3

The Falcon sensor uses certificate pinning to defend against man-in-the-middle attacks. What must you ensure is disabled for the sensor to communicate with the CrowdStrike Cloud?

A : Proxy information

B : NMAP scanning

C : TCP inspection

D : Deep packet inspection

Answer: D

Question 4

Which of the following would give you information about inactive sensors within the Falcon console?

A : Sensor Update Policies

B : Sensor Downloads

C : Sensor Coverage Lookup

D : Sensor Health

Answer: D

Question 5

The Customer ID (CID) is important in which of the following scenarios?

A : When setting up API keys

B : When performing the sensor installation process

C : When adding a user to the Falcon console under the Users application

D : When performing a Host Search

Answer: B

Page: 1 / 33

Total 164 Questions | Updated On: Jan 26, 2025

Add To Cart