Question 1

What are custom alerts based on?

Options :

A : Custom workflows

B : Custom event based triggers

C : Predefined alert templates

D : User defined Splunk queries

Answer: B

Question 2

How do you assign a policy to a specific group of hosts?

Options :

A : Create a group containing the desired hosts using 'Static Assignment.' Go to the Assigned Host Groups tab of the desired policy and dick 'Add groups to policy.' Select the desired Group(s).

B : Assign a tag to the desired hosts in Host Management. Create a group with an assignment rule based on that tag. Go to the Assignment tab of the desired policy and click 'Add Groups to Policy.' Select the desired Group(s).

C : Create a group containing the desired hosts using 'Dynamic Assignment.' Go to the Assigned Host Groups tab of the desired policy and select criteria such as OU, OS, Hostname pattern, etc.

D : On the Assignment tab of the desired policy, select 'Static' assignment. From the next window, select the desired hosts (using fitters if needed) and click Add.

Answer: C

Question 3

Which Real-Time response (RTR) role is automatically assigned to the falcon administrator ?

Options :

A :

No RTR roles are automatically assigned to the Falcon administrator

B : Administrator

C : Read only analyst

D : Active Responder

Answer: A

Question 4

A sensor that has not contacted the Falcon cloud

will be automatically deleted from the hosts list

after how many days?

Options :

A : 30 Days

B : 45 Days

C : 90 Days

D : 60 Days

Answer: B

Question 5

What best describes the relationship between Sensor Update policies and Operating Systems?

Options :

A :

A Sensor Update policy must be configured for each Operating System (Windows, Mac, Linux)

B :

Windows and Mac share Sensor Update policies. Linux requires its own set of polices based on the different kernel versions

C :

Sensor Update polices are not Operating System specific. One policy can be applied to all Operating Systems

D :

Windows has its own Sensor Update polices. But Mac and Linux share Sensor Update policies

Answer: A