Question 1

Which of the following can a Falcon Administrator edit in an existing user's profile?

Options :

A : First or Last name

B : Phone number

C : Email address

D : Working groups

Answer: D

Question 2

When the Notify End Users policy setting is turned on, which of the following is TRUE?

Options :

A : End users will not be notified as we would not want to notify a malicious actor of a detection. This setting does not exist

B : End users will be immediately notified via a pop-up that their machine is in-network isolation

C : End-users receive a pop-up notification when a prevention action occurs

D : End users will receive a pop-up allowing them to confirm or refuse a pending quarantine

Answer: C

Question 3

Which of the following best describes what the Uninstall and Maintenance Protection setting controls within your Sensor Update Policy?

Options :

A : Prevents automatic updates of the sensor

B :

Prevents the sensor from entering Reduced Functionality Mode

C :

Prevents unauthorized uninstallation of the sensor

D :

Prevents modification of sensor update policy

Answer: C

Question 4

While a host is Network contained, you need to allow the host to access internal network resources on specific IP addresses to perform patching and remediation. Which configuration would you choose?

Options :

A : Configure a Real Time Response policy allowlist with the specific IP addresses

B : Configure a Containment Policy with the specific IP addresses

C : Configure a Containment Policy with the entire internal IP CIDR block

D : Configure the Host firewall to allowlist the specific IP addresses

Answer: D

Question 5

Which of the following is NOT an available filter on the Hosts Management page?

Options :

A : Hostname

B : Username

C : Group

D : OS Version

Answer: D