Question 1

After identifying excessive permissions and missing MFA in IAM configurations, which remediation strategy is most aligned with CrowdStrike CIEM’s recommendations?

Options :

A : Delete all accounts flagged by CIEM’s Identity Analyzer.

B : Enable MFA and implement least privilege access policies for the flagged accounts.

C : Revoke all permissions from the identified accounts.

D : Transfer ownership of flagged accounts to a different administrator.

Answer: B

Question 2

Which component of Falcon Fusion is primarily responsible for automating responses to detected threats within a cloud environment?

Options :

A : Workflow Builder

B : Event Correlation Dashboard

C : Custom Alerts Manager

D : Threat Intelligence Orchestrator

Answer: A

Question 3

When analyzing cloud findings for misconfigurations, which of the following would be considered a high-risk practice that should be flagged for remediation?

Options :

A : Enforcing multi-factor authentication (MFA) for all cloud administrator accounts

B : Implementing role-based access control (RBAC) policies for cloud resources

C : Using network security groups (NSGs) to limit traffic to trusted IP addresses

D : Allowing unrestricted inbound traffic to cloud-hosted resources on port 22

Answer: D

Question 4

What is the potential impact if CrowdStrike IP addresses are not added to your container registry allowlist for image assessment?

Options :

A : Image assessment will fail, but other CrowdStrike services will continue to function.

B : CrowdStrike will switch to a default public IP to bypass the restriction.

C : Image assessment will proceed with reduced capabilities.

D : Image assessment will continue without any issues due to fallback IP detection.

Answer: A

Question 5

After identifying an account with unnecessary access privileges using the CrowdStrike CIEM/Identity Analyzer, what is the best action to mitigate risks?

Options :

A : Transfer the account-s permissions to a shared admin account for operational efficiency.

B : Delete all permissions for the account immediately.

C : Downgrade permissions to "read-only" for all resources.

D : Implement the principle of least privilege by aligning permissions with the account-s actual usage.

Answer: D