Question 1

You are tasked with generating a custom report in CrowdStrike to assist in planning a risk mitigation strategy. The report must focus on accounts exhibiting high-risk behaviors, such as excessive failed logins or abnormal activity patterns. Which configuration would best achieve this goal?

Options :

A : Filter by "Login Success Rate" and exclude all accounts with 100% successful logins.

B : Focus on accounts with password changes in the past 7 days to identify potential credential leaks.

C : Add a filter for "Behavior: Abnormal Activity" and display columns for "Risk Score" and "Event Count."

D : Include only accounts with MFA enabled to narrow the focus of the report.

Answer: C

Question 2

An organization’s development team is building a custom application that leverages CrowdStrike Identity APIs. During a team meeting, a junior developer asks where they can find an example of GraphQL query structures and authentication details specific to these APIs. What is the best resource for this information?

Options :

A : Online GraphQL Playground

B : CrowdStrike Identity Protection Console’s “API Settings” Section

C : CrowdStrike Developer Portal’s GraphQL API Documentation Section

D : CrowdStrike Community Forum

Answer: C

Question 3

Which of the following tools is exclusively available with the Identity Threat Protection (ITP) subscription and not with the Identity Threat Detection (ITD) subscription in CrowdStrike Falcon Identity Protection?

Options :

A : Basic Active Directory Monitoring

B : Privileged Account Anomaly Detection

C : Multi-Factor Authentication (MFA) Integration Support

D : Enhanced Credential Theft Protection

Answer: B

Question 4

Which scenario best illustrates the application of analysis-based risk as opposed to detection-based risk?

Options :

A : An endpoint protection tool triggers an alert for the detection of known malware on a workstation.

B : A threat hunter observes a consistent pattern of credential misuse across multiple endpoints after reviewing system logs.

C : A security tool flags an IP address for unusually high outbound traffic, leading to an investigation.

D : A firewall blocks an IP address based on a reputation feed identifying it as malicious.

Answer: B

Question 5

Your organization has noticed a dip in its CrowdStrike domain security score. The dashboard indicates several areas of concern, including weak password policies, unpatched software vulnerabilities, and the absence of multi-factor authentication (MFA) for critical accounts. You need to determine the most effective measures to improve the score. Which of the following actions will most effectively improve the domain security score in the shortest time frame?

Options :

A : Focus solely on addressing unpatched software vulnerabilities across all endpoints.

B : Enable guest access for critical accounts to ensure accessibility while you resolve the vulnerabilities.

C : Enforce a company-wide password reset policy with strong password complexity requirements and enable MFA for all critical accounts.

D : Perform a complete reinstallation of the Identity Protection software to reset the security score.

Answer: C

Smartly Prepare Exam with Free Online CrowdStrike-IDP Practice Test

Buying Options: