CrowdStrike Certified Falcon Administrator (CCFA) — Question 220

Which default user role will allow you to see all analyst session details?

Answer options

• A. Falcon Administrator
• B. Real Time Response - Active Responder
• C. Real Time Response - Read-Only Analyst
• D. Real Time Response - Administrator

Correct answer: A

Explanation

The Falcon Administrator role provides comprehensive access to all aspects of the platform, including the visibility of all analyst session details. The other roles, such as Real Time Response - Read-Only Analyst, do not have the necessary permissions to view all session information, thus limiting their access.