Question 1

What is the recommended course of action after identifying unassessed images in production using CrowdStrike Falcon?

Options :

A : Configure a backup server to replace containers using unassessed images.

B : Immediately stop all containers using unassessed images to avoid security risks.

C : Conduct a vulnerability assessment on the identified images and update policies as needed.

D : Use the Falcon runtime protection policy to automatically remediate vulnerabilities.

Answer: C

Question 2

Which component of Falcon Fusion is primarily responsible for automating responses to detected threats within a cloud environment?

Options :

A : Workflow Builder

B : Event Correlation Dashboard

C : Custom Alerts Manager

D : Threat Intelligence Orchestrator

Answer: A

Question 3

A security team has identified an outdated Kubernetes Admission Controller policy in Falcon Cloud Security that enforces image signing requirements for container workloads. They need to update the policy to align with new organizational guidelines. What is the most appropriate way to edit this policy?

Options :

A : Disable the existing policy in Falcon Cloud Security and replace it with a new Kubernetes ConfigMap.

B : Export the existing policy as a YAML file, edit it locally, and re-import it to Falcon Cloud Security.

C : Modify the existing policy directly in the Falcon Cloud Security Console.

D : Delete the current policy and create a new one from scratch.

Answer: C

Question 4

Which of the following is the most critical step when configuring an automated remediation workflow in Falcon Fusion for AWS findings?

Options :

A : Configure the workflow to delete all flagged resources immediately upon detection.

B : Integrate AWS Security Hub with Falcon Fusion to detect findings.

C : Set up appropriate triggers and actions for specific AWS findings.

D : Ensure IAM roles in AWS grant unrestricted access for remediation actions.

Answer: C

Question 5

Which of the following is a requirement for deploying the Kubernetes and Container Sensor in a Kubernetes cluster?

Options :

A : The cluster must have the kube-proxy component disabled.

B : The cluster must have at least three nodes with GPU support.

C : The sensor requires a DaemonSet to be deployed within the Kubernetes cluster.

D : All workloads in the cluster must use privileged containers.

Answer: C

Higher Test Marks with Free Online CCCS-203b Exam Practice

Buying Options: