CrowdStrike Certified Falcon Administrator (CCFA) Free Practice Exam Questions

234 real CrowdStrike Certified Falcon Administrator (CCFA) exam questions with answers and AI explanations. CrowdStrike certification prep — page 4 of 24.

  1. Question 31: You need to have the ability to monitor suspicious VBA macros. Which Sensor Visibility setting should be turned on within the Prevention policy settings?
  2. Question 32: You are evaluating the most appropriate Prevention Policy Machine Learning slider settings for your environment. In your testing phase, you configure the Detec…
  3. Question 33: In order to exercise manual control over the sensor upgrade process, as well as prevent unauthorized users from uninstalling or upgrading the sensor, which set…
  4. Question 34: Why would you assign hosts to a static group instead of a dynamic group?
  5. Question 35: What may prevent a user from logging into Falcon via single sign-on (SSO)?
  6. Question 36: The Customer ID (CID) is important in which of the following scenarios?
  7. Question 37: Which role will allow someone to manage quarantine files?
  8. Question 38: What is the maximum number of patterns that can be added when creating a new exclusion? A.10
  9. Question 39: Once an exclusion is saved, what can be edited in the future?
  10. Question 40: Which of the following options is a feature found ONLY with the Sensor-based Machine Learning (ML)?