CCFA-200 無料問題集「CrowdStrike Certified Falcon Administrator」

（A）A misconfiguration in your prevention policy for the host

（B）A Sensor Update Policy was misconfigured

（C）The host lost internet connectivity

（D）Microsoft updates altering the kernel

（A）The Default Sensor Update policy is only used for testing sensor updates

（B）The Default Sensor Update policy is a "catch-all" policy

（C）The Default Sensor Update policy does not have the "Uninstall and maintenance protection" feature

（D）The Default Sensor Update policy is disabled by default

（A）Sensor Visibility Exclusion

（B）Machine Learning Exclusion

（C）IOA Exclusion

（D）IOC Exclusion

（A）Containment Policy

（B）IP Allowlist Management

（C）Response Policy

（D）Maintenance Token

（A）Falcon NGAV is not a replacement for Windows Defender or other antivirus programs

（B）The Detection sliders cannot be set to a value less aggressive than the Prevention sliders

（C）Falcon NGAV relies on signature-based detections

（D）Activating Falcon NGAV will also enable all detection and prevention settings in the entire policy

（A）Grant the Falcon Package Full Disk Access, install the Falcon package, use falconctl to license the sensor

（B）Install the Falcon package, use falconctl to license the sensor, approve the system extension, grant the sensor Full Disk Access

（C）Install the Falcon package passing it the installation token in the command line

（D）Grant the Falcon Package Full Disk Access, install the Falcon package, load the Falcon Sensor with the command 'falconctl stats'

（A）By clicking on "Older versions" links under the Host setup and management > Deploy > Sensor downloads

（B）Older versions of the sensor are not available for download

（C）By installing the current sensor and clicking the "downgrade" button during the install

（D）By emailing CrowdStrike support at [email protected]

（A）Real Time Response -Administrator

（B）Real Time Response -Active Responder

（C）None of the Real Time Response roles allows this

（D）Real Time Response - Read-Only Analyst

（A）Discover module

（B）Intelligence module

（C）Configuration module

（D）Support module

（A）From User Management, select "Update Account" and manually create a new password for the affected user account

（B）From User Management, select "Reset Password" from the three dot menu for the affected user account

（C）From User Management, the administrator must rebuild the account as the certificate for user specific private/public key generation is no longer valid

（D）From User Management, open the account details for the affected user and select "Generate New Password"