CrowdStrike Certified Falcon Administrator (CCFA) — Question 224

A member of your SECOPS team currently has the role of Falcon Security Lead to be able to Manage detections, quarantine files and reset user credentials. Which additional role is required to also allow them to view and modify remediation actions?

Answer options

• A. Detections Exception Manager
• B. Remediation Manager
• C. Endpoint Manager
• D. Quarantine Manager

Correct answer: B

Explanation

The Remediation Manager role is essential for viewing and modifying remediation actions, which is why it is the correct answer. The other roles, while having their own specific permissions, do not provide the necessary access to manage remediation actions.