CrowdStrike Certified Falcon Administrator (CCFA) Free Practice Exam Questions

234 real CrowdStrike Certified Falcon Administrator (CCFA) exam questions with answers and AI explanations. CrowdStrike certification prep — page 11 of 24.

1. Question 101: How does the Unique Hosts Connecting to Countries Map help an administrator?
2. Question 102: When creating a Host Group for all Workstations in an environment, what is the best method to ensure all workstation hosts are added to the group?
3. Question 103: On which page of the Falcon console can one locate the Customer ID (CID)?
4. Question 104: If you are not able to update your Falcon sensors on a regular basis, what is the maximum recommended aging period before updating your sensors?
5. Question 105: What best describes what happens to detections in the console after clicking "Disable Detections" for a host from within the Host Management page?
6. Question 106: When a Linux host is in Reduced Functionality Mode (RFM) what telemetry and protection is still offered?
7. Question 107: What internet domain needs to be added to any required allowlists to allow sensors to communicate with the CrowdStrike Cloud?
8. Question 108: Why would you use the Prevention Policy Debug Report?
9. Question 109: The Falcon sensor uses certificate pinning to defend against man-in-the-middle attacks. What must you ensure is disabled for the sensor to communicate with the…
10. Question 110: After Network Containing a host, your Incident Response team states they are unable to remotely connect to the host. Which of the following would need to be co…