CrowdStrike Certified Falcon Administrator (CCFA) Free Practice Exam Questions

234 real CrowdStrike Certified Falcon Administrator (CCFA) exam questions with answers and AI explanations. CrowdStrike certification prep — page 2 of 24.

1. Question 11: How long are detection events kept in Falcon?
2. Question 12: When configuring a specific prevention policy, the admin can align the policy to two different types of groups, Host Groups and which other?
3. Question 13: You are attempting to install the Falcon sensor on a host with a slow Internet connection and the installation fails after 20 minutes. Which of the following p…
4. Question 14: How do you assign a policy to a specific group of hosts?
5. Question 15: To enhance your security, you want to detect and block based on a list of domains and IP addresses. How can you use IOC management to help this objective?
6. Question 16: You want the Falcon Cloud to push out sensor version changes but you also want to manually control when the sensor version is upgraded or downgraded. In the Se…
7. Question 17: Which of the following roles allows a Falcon user to create Real Time Response Custom Scripts?
8. Question 18: Which of the following is an effective Custom IOA rule pattern to kill any process attempting to access www.badguydomain.com?
9. Question 19: Where do you obtain the Windows sensor installer for CrowdStrike Falcon?
10. Question 20: Which of the following is TRUE regarding Falcon Next-Gen AntiVirus (NGAV)?