CrowdStrike Certified Falcon Administrator (CCFA) Free Practice Exam Questions

234 real CrowdStrike Certified Falcon Administrator (CCFA) exam questions with answers and AI explanations. CrowdStrike certification prep — page 10 of 24.

1. Question 91: Which statement describes what is recommended for the Default Sensor Update policy?
2. Question 92: What is the goal of a Network Containment Policy?
3. Question 93: What can the Quarantine Manager role do?
4. Question 94: What command should be run to verify if a Windows sensor is running?
5. Question 95: Where can you modify settings to permit certain traffic during a containment period?
6. Question 96: You notice there are multiple Windows hosts in Reduced functionality mode (RFM). What is the most likely culprit causing these hosts to be in RFM?
7. Question 97: Which of the following is TRUE of the Logon Activities Report?
8. Question 98: What model is used to create workflows that would allow you to create custom notifications based on particular events which occur in the Falcon platform?
9. Question 99: Which port and protocol does the sensor use to communicate with the CrowdStrike Cloud?
10. Question 100: What is the purpose of using groups with Sensor Update policies in CrowdStrike Falcon?