Question 1

You have a Windows host on your network in

Reduced functionality mode (RFM). While the

system is in RFM, which of the following is TRUE?

Options :

A : Event reporting will be unavailable

B : System monitoring will be unavailable

C : Prevention patterns will not be triggered

D : Some detection patterns and preventions

will not be triggered

Answer: D

Question 2

Which Real-Time response (RTR) role is automatically assigned to the falcon administrator ?

Options :

A :

No RTR roles are automatically assigned to the Falcon administrator

B : Administrator

C : Read only analyst

D : Active Responder

Answer: A

Question 3

Which of the following is NOT an available filter on the Hosts Management page?

Options :

A : Hostname

B : Username

C : Group

D : OS Version

Answer: D

Question 4

How do you assign a policy to a specific group of hosts?

Options :

A : Create a group containing the desired hosts using 'Static Assignment.' Go to the Assigned Host Groups tab of the desired policy and dick 'Add groups to policy.' Select the desired Group(s).

B : Assign a tag to the desired hosts in Host Management. Create a group with an assignment rule based on that tag. Go to the Assignment tab of the desired policy and click 'Add Groups to Policy.' Select the desired Group(s).

C : Create a group containing the desired hosts using 'Dynamic Assignment.' Go to the Assigned Host Groups tab of the desired policy and select criteria such as OU, OS, Hostname pattern, etc.

D : On the Assignment tab of the desired policy, select 'Static' assignment. From the next window, select the desired hosts (using fitters if needed) and click Add.

Answer: C

Question 5

While a host is Network contained, you need to allow the host to access internal network resources on specific IP addresses to perform patching and remediation. Which configuration would you choose?

Options :

A : Configure a Real Time Response policy allowlist with the specific IP addresses

B : Configure a Containment Policy with the specific IP addresses

C : Configure a Containment Policy with the entire internal IP CIDR block

D : Configure the Host firewall to allowlist the specific IP addresses

Answer: D