Question 1

Your security team is implementing honeytoken accounts to detect potential credential misuse in your organization. Which of the following is the best approach for creating and managing honeytoken accounts?

Options :

A : Disable honeytoken accounts after creation to avoid accidental usage.

B : Ensure that honeytoken accounts are identical to standard user accounts and log their activity daily.

C : Create accounts that resemble legitimate users but are configured to alert on any usage.

D : Use accounts with administrative privileges and ensure they are regularly accessed by administrators.

Answer: C

Question 2

Your organization plans to implement CrowdStrike to streamline identity management and secure access to cloud-based applications. The goal is to integrate with an existing Identity-as-a-Service (IDaaS) provider that already manages user authentication and role-based access. Which connector type should you configure to achieve this integration effectively?

Options :

A : Configure an MFA connector to enforce authentication policies through the IDaaS provider.

B : Disable connectors entirely and configure CrowdStrike policies directly.

C : Use the MFA connector and create manual rules for IDaaS integration.

D : Configure an IDaaS connector to integrate the existing identity provider with CrowdStrike.

Answer: D

Question 3

Which file format and structure is required to successfully upload a custom list of compromised passwords to the CrowdStrike Compromised Password directory?

Options :

A : JSON file with each password as a key-value pair.

B : XML file structured with tags for each entry.

C : Plain text file with one password per line.

D : CSV file with a single column labeled "Compromised Passwords" and passwords listed under it.

Answer: D

Question 4

Which of the following behaviors is most likely to increase a user’s identity risk score?

Options :

A : Accessing sensitive data during business hours from a corporate device.

B : Using a personal email address for MFA verification.

C : Repeated failed login attempts within a short timeframe.

D : Logging in from a new geographic location.

Answer: C

Question 5

An organization’s development team is building a custom application that leverages CrowdStrike Identity APIs. During a team meeting, a junior developer asks where they can find an example of GraphQL query structures and authentication details specific to these APIs. What is the best resource for this information?

Options :

A : Online GraphQL Playground

B : CrowdStrike Identity Protection Console’s “API Settings” Section

C : CrowdStrike Developer Portal’s GraphQL API Documentation Section

D : CrowdStrike Community Forum

Answer: C

Higher Test Marks with Free Online CrowdStrike-IDP Exam Practice

Buying Options: