CrowdStrike Certified Falcon Administrator (CCFA) — Question 152

Which Real Time Response role will allow you to see all analyst session details?

Answer options

• A. None of the Real Time Response roles allows this
• B. Real Time Response - Active Responder
• C. Real Time Response - Read-Only Analyst
• D. Real Time Response - Administrator

Correct answer: D

Explanation

The Real Time Response - Administrator role has full permissions, including the ability to view all analyst session details. The other roles, such as Active Responder and Read-Only Analyst, have restricted access and do not provide comprehensive visibility into session details.