Question 1

Your organization uses multiple CrowdStrike instances for different departments, and you need to ensure consistent configuration across all environments. Which feature should you use to synchronize policy and configuration settings between instances?

Options :

A : Global API Token

B : Policy Export/Import

C : Connector Templates

D : Threat Intelligence Subscription

Answer: B

Question 2

According to the NIST SP 800-207 framework, which of the following is a key capability that a Zero Trust Architecture should provide?

Options :

A : Granting access to resources based on network location.

B : Allowing full access to the network for authorized users.

C : Continuous monitoring and visibility of all network traffic and user activity.

D : Trusting known devices indefinitely without reevaluation.

Answer: C

Question 3

An organization wants to implement domain security measures to protect its Active Directory environment. Which goal from the domain security overview most directly contributes to the prevention of unauthorized access to privileged accounts?

Options :

A : Enforce least privilege access across all Active Directory accounts.

B : Enable audit logging for all user activities in the domain.

C : Deploy anti-virus solutions to all endpoints within the network.

D : Disable unused domain controllers to reduce the attack surface.

Answer: A

Question 4

A company is setting up an Identity-as-a-Service (IDaaS) platform to centralize identity management and streamline Single Sign-On (SSO) for its employees. During configuration, the IT administrator must ensure that applications integrated with the IDaaS platform enforce role-based access control (RBAC). Which configuration step is essential to achieve this?

Options :

A : Enable adaptive authentication for all users.

B : Synchronize user attributes and roles from the organization-s directory service.

C : Require mandatory approval workflows for every new account creation.

D : Configure application-specific access rules directly in each application.

Answer: B

Question 5

A company uses a scheduled task to run a proprietary script, DailyReportGenerator.ps1, which is repeatedly flagged by CrowdStrike as suspicious. The security team has verified that the task is safe and wants to prevent further detections while ensuring monitoring remains active for all other scheduled tasks. How should the team add an appropriate detection exclusion in CrowdStrike?

Options :

A : Add an exception for the specific scheduled task by its name and command-line arguments.

B : Create a detection exclusion for the hash of DailyReportGenerator.ps1.

C : Add a process exclusion for powershell.exe across all endpoints.

D : Exclude all scheduled tasks from detection alerts.

Answer: A

Higher Test Marks with Free Online CrowdStrike-IDP Exam Practice

Buying Options: