CrowdStrike Certified Falcon Administrator (CCFA) Free Practice Exam Questions

234 real CrowdStrike Certified Falcon Administrator (CCFA) exam questions with answers and AI explanations. CrowdStrike certification prep — page 16 of 24.

  1. Question 151: What critical prevention policy setting prevents sensor-related files, folders, and registry objects from being renamed or deleted?
  2. Question 152: Which Real Time Response role will allow you to see all analyst session details?
  3. Question 153: Which statement is TRUE regarding disabling detections on a host?
  4. Question 154: When performing targeted filtering for a host on the Host Management Page, which filter bar attribute is NOT case-sensitive?
  5. Question 155: What is the best way to write an ML exclusion for any executable file at "C:\Program Files\Software\"?
  6. Question 156: In order to prevent duplicate Agent IDs, what install parameter should be used on VMs to be used as persistent clones?
  7. Question 157: What best describes the effect of disabling detections for a host?
  8. Question 158: Leadership has asked for a monthly report on number of hosts by OS version, device type, and geographic location. What dashboard option includes this informati…
  9. Question 159: There are a significant number of false positive detections from your developers that are getting blocked and quarantined by Falcon. What Indicator of Compromi…
  10. Question 160: What happens to detections in the console after clicking “Disable Detections" for a host from within the Host Management page?