Continue to Check the CCFA-200b Free Dumps (Part 2, Q41-Q60): You Can Find the CCFA-200b Dumps (V8.02) Are Valid for Preparation

1. Which port and protocol does the sensor use to communicate with the CrowdStrike Cloud?

2. What type of information is found in the Linux Sensors Dashboard?

3. How long are detection events kept in Falcon?

4. What can the Quarantine Manager role do?

5. How do you find a list of inactive sensors?

6. The Falcon sensor uses certificate pinning to defend against man-in-the-middle attacks.

Which statement is TRUE concerning Falcon sensor certificate validation?

7. You have an existing workflow that is triggered on a critical detection that sends an email to the escalation team. Your CISO has asked to also be notified via email with a customized message.

What is the best way to update the workflow?

8. You have been provided with a list of 100 hashes that are not malicious but your company has deemed to be inappropriate for work computers. They have asked you to ensure that they are not allowed to run in your environment. You have chosen to use Falcon to do this.

Which is the best way to accomplish this?

9. Which is a filter within the Host setup and management > Host management page?

10. How do you assign a Prevention policy to one or more hosts?

11. Where do you obtain the Windows sensor installer for CrowdStrike Falcon?

12. Which of the following applies to Custom Blocking Prevention Policy settings?

13. An administrator creating an exclusion is limited to applying a rule to how many groups of hosts?

14. Why is it critical to have separate sensor update policies for Windows/Mac/*nix?

15. What information is provided in Logan Activities under Visibility Reports?

16. If a user wanted to install an older version of the Falcon sensor, how would they find the older installer file?

17. Which of the following is an effective Custom IOA rule pattern to kill any process attempting to access www.badguydomain.com?

18. Custom IOA rules are defined using which syntax?

19. With Custom Alerts, it is possible to __________.

20. How can you find a list of hosts that have not communicated with the CrowdStrike Cloud in the last 30 days?