Question 1

Which method is most effective for identifying Indicators of Attack (IOAs) in a cloud-native environment?

Options :

A : Implement runtime monitoring via Kubernetes native tools such as kube-audit

B : Utilize CrowdStrike’s integration with cloud-native APIs for IOA detection

C : Deploy a CrowdStrike Falcon sensor on all endpoints

D : Rely on cloud provider security tools like AWS GuardDuty or Azure Security Center

Answer: B

Question 2

You are creating a custom Indicator of Maliciousness (IOM) rule in CrowdStrike Falcon to block access to a specific malicious domain. Which of the following steps is correct for ensuring the IOM rule functions effectively?

Options :

A : Use the "File Hash" condition type to specify the domain’s IP address.

B : Assign the IOM rule a severity level of "Informational" to ensure it blocks the domain.

C : Add the domain to the Global Allowlist to ensure it is blocked.

D : Select the "Domain Name" condition type and specify the domain to block.

Answer: D

Question 3

Which of the following is a requirement for deploying the Kubernetes and Container Sensor in a Kubernetes cluster?

Options :

A : The cluster must have the kube-proxy component disabled.

B : The cluster must have at least three nodes with GPU support.

C : The sensor requires a DaemonSet to be deployed within the Kubernetes cluster.

D : All workloads in the cluster must use privileged containers.

Answer: C

Question 4

Which step is essential when registering a cloud account in Falcon Cloud Security?

Options :

A : Enabling API access and permissions to allow CrowdStrike to monitor the account.

B : Deploying the Falcon agent on all instances in the account before registration.

C : Configuring automatic backup settings for all cloud resources.

D : Configuring network firewalls to route all traffic through CrowdStrike-s servers.

Answer: A

Question 5

A company wants to create a Falcon Sensor policy to enforce strict monitoring on critical servers. What is an essential configuration step for the policy?

Options :

A : Configure prevention settings such as "Exploit Mitigation" and "Malware Prevention" for the policy.

B : Set the policy mode to "Detection Only" for all servers.

C : Add the policy under the "Sensor Exclusions" tab in the Falcon Console.

D : Assign the policy to the "Default Group" to ensure global coverage.

Answer: A