CrowdStrike Certified Falcon Administrator (CCFA) — Question 234

You have a member of your SECOPS team that is building custom scripts for your environment and they cannot save or share them in Falcon. What additional role do they need to be able accomplish this?

Answer options

• A. Real Time Responde - Active Responder
• B. All Real Time Response roles can do this
• C. Falcon Scripts Manager
• D. Real Time Response - Administrator

Correct answer: D

Explanation

The Real Time Response - Administrator role has the necessary permissions to save and share custom scripts in Falcon. The other roles, including Active Responder and Falcon Scripts Manager, do not have the same level of access required for these actions, and saying that all Real Time Response roles can do this is inaccurate as not all roles have the same capabilities.