CrowdStrike Certified Falcon Administrator (CCFA) — Question 17

Which of the following roles allows a Falcon user to create Real Time Response Custom Scripts?

Answer options

• A. Real Time Responder – Administrator
• B. Real Time Responder – Read Only Analyst
• C. Real Time Responder – Script Developer
• D. Real Time Responder – Active Responder

Correct answer: A

Explanation

The correct answer is A, as the Real Time Responder – Administrator role has the necessary permissions to create Custom Scripts for Real Time Response. The other roles, including Read Only Analyst, Script Developer, and Active Responder, do not have the privileges required to create such scripts.