Free Access CrowdStrike.CCFA-200.v2023-06-29.q35 Practice Test (Page 3)

Question 6

While a host is Network contained, you need to allow the host to access internal network resources on specific IP addresses to perform patching and remediation. Which configuration would you choose?

A.Configure a Real Time Response policy allowlist with the specific IP addresses

B.Configure a Containment Policy with the entire internal IP CIDR block

C.Configure the Host firewall to allowlist the specific IP addresses

D.Configure a Containment Policy with the specific IP addresses

Question 7

How long are detection events kept in Falcon?

A.Detection events are kept for 7 days

B.Detection events are kept for 30 days

C.Detection events are kept for 90 days

D.Detections events are kept for your subscribed data retention period

Question 8

How do you find a list of inactive sensors?

A.Run the Sensor Aging Report within the Investigate option

B.Run the Inactive Sensor Report in the Host setup and management option

C.The Falcon platform does not provide reporting for inactive sensors

D.A sensor is always considered active until removed by an Administrator

Question 9

You need to export a list of all deletions for a specific Host Name in the last 24 hours. What is the best way to do this?

A.Go to Host Management in the Host page. Select the host and use the Export Detections button

B.Utilize the Detection Activity Dashboard. Use the filters to focus on the appropriate hostname and time, then export the results from the "Detections by Host" section

C.In the Investigate module, access the Detection Activity page. Use the filters to focus on the appropriate hostname and time, then export the results

D.Utilize the Detection Resolution Dashboard. Use the filters to focus on the appropriate hostname and time, then export the results from the "Detection Resolution History" section

Question 10

In order to quarantine files on the host, what prevention policy settings must be enabled?

A.Malware Protection and Windows Anti-Malware Execution Blocking must be enabled

B.Next-Gen Antivirus Prevention sliders and "Quarantine & Security Center Registration" must be enabled

C.Malware Protection and Custom Execution Blocking must be enabled

D.Behavior-Based Threat Prevention sliders and Advanced Remediation Actions must be enabled

Other Version: 1411CrowdStrike.CCFA-200.v2025-04-26.q88; 1140CrowdStrike.CCFA-200.v2024-01-08.q82; 847CrowdStrike.CCFA-200.v2023-04-27.q33; 953CrowdStrike.CCFA-200.v2023-01-14.q33

Latest Upload: 448PaloAltoNetworks.NGFW-Engineer.v2026-05-01.q43; 584Nokia.4A0-113.v2026-05-01.q69; 613EC-COUNCIL.312-49v11.v2026-04-30.q214; 597Microsoft.MB-820.v2026-04-30.q101; 439Salesforce.MC-202.v2026-04-30.q57; 480BICSI.INSTC_V8.v2026-04-29.q53; 582NMLS.MLO.v2026-04-28.q82; 404NCARB.Project-Management.v2026-04-28.q27; 759EMC.D-AV-DY-23.v2026-04-27.q184; 1987ServiceNow.CSA.v2026-04-27.q483

Question 6

Question 7

Question 8

Question 9

Question 10

Download PDF File