CrowdStrike Certified Falcon Administrator CCFA-200 Exam Questions with Experts Answers Updated Recently

A.  

To group hosts with others in the same business unit

B.  

To group hosts according to the order in which Falcon was installed, so that updates are installed in the same order every time

C.  

To prioritize the order in which Falcon updates are installed, so that updates are not installed all at once leading to network congestion

D.  

To allow the controlled assignment of sensor versions onto specific hosts

A.  

A list of analyst login activity

B.  

A list of specific changes to prevention policy

C.  

A list of actions taken via Falcon OAuth2-based APIs

D.  

A list of newly added hosts

A.  

Endpoints with detections disabled will not alert on anything until detections are enabled again

B.  

Endpoints cannot have their detections disabled individually

C.  

DetectionSummaryEvent stops sending to the Streaming API for that host

D.  

Endpoints with detections disabled will not alert on anything for 24 hours (by default) or longer if that setting is changed

A.  

The sensor would provide protection as normal, without event telemetry

B.  

The sensor would provide minimal protection

C.  

The sensor would function as normal

D.  

The sensor provides no protection, and only collects Sensor Heart Beat events