CrowdStrike Certified Falcon Administrator (CCFA) — Question 82
How are user permissions set in Falcon?
Answer options
- A. Permissions are assigned to a User Group and then users are assigned to that group, thereby inheriting those permissions
- B. Pre-defined permissions are assigned to sets called roles. Users can be assigned multiple roles based on job function and they assume a cumulative set of permissions based on those assignments
- C. An administrator selects individual granular permissions from the Falcon Permissions List during user creation
- D. Permissions are token-based. Users request access to a defined set of permissions and an administrator adds their token to the set of permissions
Correct answer: B
Explanation
The correct answer is B because Falcon utilizes predefined roles to group permissions, allowing users to inherit multiple permissions based on their assigned roles. Option A is incorrect as it focuses solely on User Groups rather than roles. Option C is not accurate because it implies a granular selection process that is not how permissions are structured in Falcon. Option D incorrectly describes a token-based system that does not apply to how Falcon manages permissions.