Online Access Free CCCS-203b Practice Test

Which of the following best describes assessed/unassessed items within Falcon Cloud Security?

• A.Assessed items are container images that have undergone vulnerability analysis, while unassessed items are images that have not yet been scanned.
• B.Assessed items pertain to container images used in production, while unassessed items are deprecated images stored in registries.
• C.Assessed items include accounts and containers currently monitored, whereas unassessed items are external accounts or containers.
• D.Assessed items are configurations actively updated by CrowdStrike, and unassessed items are configurations maintained by third-party services.

Using CrowdStrike CIEM/Identity Analyzer, which of the following indicates an account that uses MFA?

• A.An account that requires a username and password to log in.
• B.An account with no configured security policy for additional authentication factors.
• C.An account that prompts users to enter a code sent to their email in addition to their password.
• D.An account that uses only an SSH key pair for authentication.

You need to register one AWS account as part of a deployment of Falcon Cloud Security. You decide to complete the registration process in the Falcon UI.
What will be utilized during this process if you choose the recommended method to register an individual AWS account?

• A.AWS Config
• B.A Bash script
• C.AWS CloudFormation
• D.A Terraform script

Which of the following security issues is most critical to address in a container image according to the Image Assessment report from CrowdStrike?

• A.Missing comments in the Dockerfile
• B.High-severity CVE vulnerabilities in system libraries
• C.Deprecated or unused packages in the image
• D.Detected hardcoded credentials for a development database

What cloud-conscious attacker behavior is used to allow them to stay hidden in the environment?

• A.Certificate added to an application registration
• B.Storage Account Networking changed to All Networks
• C.EC2 Default security group does not block all traffic
• D.CloudTrail logging disabled