Question 1

What is the primary purpose of creating Falcon Cloud Security Policies and Rules in a cloud environment?

Options :

A : To configure network ingress and egress rules for cloud-native firewalls.

B : To enforce granular security controls for workloads, users, and cloud resources based on predefined conditions.

C : To manage the deployment of Falcon agents across virtual machines.

D : To automate software updates for containerized applications in the cloud.

Answer: B

Question 2

While editing the cloud security posture policy in Falcon to enhance compliance with industry standards, you notice a rule that detects misconfigured IAM roles in your AWS environment. What action should you configure for this rule to prevent unauthorized access effectively?

Options :

A : Set the action to "Alert" and notify the security operations team.

B : Enable auto-remediation to delete all misconfigured IAM roles immediately.

C : Add a condition to the rule requiring all IAM roles to use least-privilege policies.

D : Set the action to "Monitor Only" to track usage of the misconfigured roles.

Answer: C

Question 3

You are creating a custom Indicator of Maliciousness (IOM) rule in CrowdStrike Falcon to block access to a specific malicious domain. Which of the following steps is correct for ensuring the IOM rule functions effectively?

Options :

A : Use the "File Hash" condition type to specify the domain’s IP address.

B : Assign the IOM rule a severity level of "Informational" to ensure it blocks the domain.

C : Add the domain to the Global Allowlist to ensure it is blocked.

D : Select the "Domain Name" condition type and specify the domain to block.

Answer: D

Question 4

Which of the following is a requirement for deploying the Kubernetes and Container Sensor in a Kubernetes cluster?

Options :

A : The cluster must have the kube-proxy component disabled.

B : The cluster must have at least three nodes with GPU support.

C : The sensor requires a DaemonSet to be deployed within the Kubernetes cluster.

D : All workloads in the cluster must use privileged containers.

Answer: C

Question 5

You are tasked with creating a new Kubernetes Admission Controller policy in Falcon Cloud Security. What is the primary purpose of this policy?

Options :

A : To control and enforce security configurations at the time of resource creation or update in Kubernetes.

B : To provide real-time alerts for unauthorized API calls in the Kubernetes control plane.

C : To monitor network traffic within Kubernetes clusters for malicious activity.

D : To scan container images for vulnerabilities after deployment.

Answer: A