CrowdStrike Certified Falcon Administrator (CCFA) Free Practice Exam Questions

234 real CrowdStrike Certified Falcon Administrator (CCFA) exam questions with answers and AI explanations. CrowdStrike certification prep — page 1 of 24.

1. Question 1: An administrator creating an exclusion is limited to applying a rule to how many groups of hosts?
2. Question 2: What is the purpose of a containment policy?
3. Question 3: What is the function of a single asterisk (*) in an ML exclusion pattern?
4. Question 4: Even though you are a Falcon Administrator, you discover you are unable to use the "Connect to Host" feature to gather additional information which is only ava…
5. Question 5: Your CISO has decided all Falcon Analysts should also have the ability to view files and file contents locally on compromised hosts, but without the ability to…
6. Question 6: One of your development teams is working on code for a new enterprise application but Falcon continually flags the execution as a detection during testing. All…
7. Question 7: Which role is required to manage groups and policies in Falcon?
8. Question 8: Which of the following can a Falcon Administrator edit in an existing user's profile?
9. Question 9: Which of the following applies to Custom Blocking Prevention Policy settings?
10. Question 10: How many "Auto" sensor version update options are available for Windows Sensor Update Policies?