Official Bank 0/153

CrowdStrike Certified Falcon Administrator (CCFA-200) - CrowdStrike Actual Exam Questions

Last updated on April 15, 2026

97% Exam Compliance
153 Total Questions
1
Question

What three things does a workflow condition consist of?

Options
A

A parameter, an operator, and a value

B

A beginning, a middle, and an end

C

Triggers, actions, and alerts

D

Notifications, alerts, and API's

Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

2
Question

When creating a Host Group for all Workstations in an environment, what is the best method to ensure all workstation hosts are added to the group?

Options
A

Create a Dynamic Group with Type=Workstation Assignment

B

Create a Dynamic Group and Import All Workstations

C

Create a Static Group and Import all Workstations

D

Create a Static Group with Type=Workstation Assignment

Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

3
Question

What information does the API Audit Trail Report provide?

Options
A

A list of analyst login activity

B

A list of specific changes to prevention policy

C

A list of actions taken via Falcon OAuth2-based APIs

D

A list of newly added hosts

Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

4
Question

Which of the following can a Falcon Administrator edit in an existing user's profile?

Options
A

First or Last name

B

Phone number

C

Email address

D

Working groups

Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

5
Question

What is the purpose of precedence with respect to the Sensor Update policy?

Options
A

Precedence applies to the Prevention policy and not to the Sensor Update policy

B

Hosts assigned to multiple policies will assume the highest ranked policy in the list (policy with the lowest number)

C

Hosts assigned to multiple policies will assume the lowest ranked policy in the list (policy with the highest number)

D

Precedence ensures that conflicting policy settings are not set in the same policy

Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

Finish Practice?

Are you sure you want to finish? This will end your practice session.