CrowdStrike Certified Falcon Administrator (CCFA) — Question 37
Which role will allow someone to manage quarantine files?
Answer options
- A. Falcon Security Lead
- B. Detections Exceptions Manager
- C. Falcon Analyst – Read Only
- D. Endpoint Manager
Correct answer: A
Explanation
The Falcon Security Lead has the appropriate permissions to manage quarantine files, which involves reviewing and taking action on potentially harmful files. The other options do not have the authority required for this task; for instance, the Falcon Analyst – Read Only role is limited to viewing data without management capabilities.