Question 1

When integrating an AWS cloud account with CrowdStrike Falcon, which of the following permissions must the dedicated IAM role include?

Options :

A : Write access to modify security groups and IAM roles in the AWS account.

B : Permissions to read EC2 metadata, CloudTrail logs, and list S3 buckets.

C : Access to create new virtual machines for deploying the Falcon agent.

D : Full administrative access to the AWS account to manage all resources.

Answer: B

Question 2

A security team has identified an outdated Kubernetes Admission Controller policy in Falcon Cloud Security that enforces image signing requirements for container workloads. They need to update the policy to align with new organizational guidelines. What is the most appropriate way to edit this policy?

Options :

A : Disable the existing policy in Falcon Cloud Security and replace it with a new Kubernetes ConfigMap.

B : Export the existing policy as a YAML file, edit it locally, and re-import it to Falcon Cloud Security.

C : Modify the existing policy directly in the Falcon Cloud Security Console.

D : Delete the current policy and create a new one from scratch.

Answer: C

Question 3

You have reviewed the IAM findings from CrowdStrike’s Cloud Infrastructure Entitlement Manager (CIEM). These findings indicate several issues, including unused roles, excessive permissions, and accounts without Multi-Factor Authentication (MFA). What is the most efficient way to summarize these IAM findings for presentation to your organization’s leadership?

Options :

A : Rely on CrowdStrike’s AI-driven recommendations without creating a formal summary.

B : Export the CIEM findings to a spreadsheet and manually create a summary report.

C : Perform a manual analysis of user permissions and summarize the findings in a text editor.

D : Use the CIEM dashboard’s built-in reporting feature to generate an IAM summary report.

Answer: D

Question 4

Which component of Falcon Fusion is primarily responsible for automating responses to detected threats within a cloud environment?

Options :

A : Workflow Builder

B : Event Correlation Dashboard

C : Custom Alerts Manager

D : Threat Intelligence Orchestrator

Answer: A

Question 5

What is the primary purpose of creating Falcon Cloud Security Policies and Rules in a cloud environment?

Options :

A : To configure network ingress and egress rules for cloud-native firewalls.

B : To enforce granular security controls for workloads, users, and cloud resources based on predefined conditions.

C : To manage the deployment of Falcon agents across virtual machines.

D : To automate software updates for containerized applications in the cloud.

Answer: B