CrowdStrike Certified Falcon Administrator (CCFA) — Question 225

Which role allows a user to connect to hosts using Real-Time Response?

Answer options

• A. Endpoint Manager
• B. Falcon Administrator
• C. Real Time Responder – Active Responder
• D. Prevention Hashes Manager

Correct answer: C

Explanation

The correct answer is C, as the Real Time Responder – Active Responder role specifically enables users to connect to and manage hosts via Real-Time Response. The other roles, while they have different administrative capabilities, do not provide this specific functionality.