Logo ExamsQA
Exit
Official Bank 0/151

CrowdStrike Certified Falcon Administrator (CCFA-200b) - CrowdStrike Exam Questions

Last updated on July 22, 2026

97% Exam Compliance
151 Total Questions
1
Question
What is the maximum number of patterns that can be added when creating a new exclusion?
Options
A 10
B 0
C 1
D 5
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

2
Question
What best describes what happens to detections in the console after clicking "Disable Detections" for a host from within the Host Management page?
Options
A The detections for the host are removed from the console immediately and no new detections will display in the console going forward
B Existing detections for the host remain, but no new detections will display in the console going forward
C Preventions will be disabled for the host
D You cannot disable detections for a host
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

3
Question
What would be the most appropriate action to take if you wanted to prevent a folder from being uploaded to the cloud without disabling uploads globally?
Options
A A Machine Learning exclusion
B A Sensor Visibility exclusion
C An IOA exclusion
D A Custom IOC entry
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

4
Question
Even though you are a Falcon Administrator, you discover you are unable to use the "Connect to Host" feature to gather additional information which is only available on the host. Which role do you need added to your user account to have this capability?
Options
A Real Time Responder
B Endpoint Manager
C Falcon Investigator
D Remediation Manager
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

5
Question
To enhance your security, you want to detect and block based on a list of domains and IP addresses.

How can you use IOC management to help this objective?
Options
A Blocking of Domains and IP addresses is not a function of IOC management. A Custom IOA Rule should be used instead
B Using IOC management, import the list of hashes and IP addresses and set the action to Detect Only
C Using IOC management, import the list of hashes and IP addresses and set the action to Prevent/Block
D Using IOC management, import the list of hashes and IP addresses and set the action to No Action
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

Finish Practice?

Are you sure you want to finish? This will end your practice session.