Question 1

Which file format and structure is required to successfully upload a custom list of compromised passwords to the CrowdStrike Compromised Password directory?

Options :

A : JSON file with each password as a key-value pair.

B : XML file structured with tags for each entry.

C : Plain text file with one password per line.

D : CSV file with a single column labeled "Compromised Passwords" and passwords listed under it.

Answer: D

Question 2

Your organization has a group of third-party vendor accounts with access to non-sensitive internal systems. These accounts are monitored but do not have MFA enabled. Recent logs show unusual but non-malicious login patterns from different regions. Based on the categories of entity risk, how should this group be classified?

Options :

A : Low Risk: The accounts access non-sensitive systems, and no malicious activity has been detected.

B : Medium Risk: The unusual login patterns and lack of MFA elevate the risk slightly.

C : High Risk: Unusual login patterns indicate a likely compromise of these accounts.

D : High Risk: Third-party accounts always represent a severe risk due to external control.

Answer: B

Question 3

What is a core principle of Zero Trust Architecture as defined in the NIST SP 800-207 framework?

Options :

A : External threats are considered less dangerous than internal threats.

B : Authentication and authorization are enforced continuously, regardless of network location.

C : Implicit trust is granted to devices within the corporate network.

D : Users are assumed to have access to all resources once authenticated.

Answer: B

Question 4

Your organization plans to implement CrowdStrike to streamline identity management and secure access to cloud-based applications. The goal is to integrate with an existing Identity-as-a-Service (IDaaS) provider that already manages user authentication and role-based access. Which connector type should you configure to achieve this integration effectively?

Options :

A : Configure an MFA connector to enforce authentication policies through the IDaaS provider.

B : Disable connectors entirely and configure CrowdStrike policies directly.

C : Use the MFA connector and create manual rules for IDaaS integration.

D : Configure an IDaaS connector to integrate the existing identity provider with CrowdStrike.

Answer: D

Question 5

Your organization wants to set up a connector to integrate CrowdStrike with its SIEM solution. Before proceeding, you need to locate the official documentation to guide the configuration process. Where should you look to find the most accurate and up-to-date connector setup documentation for this integration?

Options :

A : CrowdStrike Community Forum

B : CrowdStrike Developer Portal

C : Third-Party Security Blogs

D : CrowdStrike Falcon Console Help Section

Answer: D

Higher Test Marks with Free Online CrowdStrike-IDP Exam Practice

Buying Options: