NO.33 Your CISO has decided all Falcon Analysts should also have the ability to view files and file contents locally on compromised hosts, but without the ability to take them off the host. What is the most appropriate role that can be added to fullfil this requirement?

NO.34 On which page of the Falcon console would you create sensor groups?

NO.35 What is the goal of a Network Containment Policy?

NO.36 Which is the correct order for manually installing a Falcon Package on a macOS system?

NO.37 With Custom Alerts, it is possible to __________.

NO.38 Even though you are a Falcon Administrator, you discover you are unable to use the “Connect to Host” feature to gather additional information which is only available on the host. Which role do you need added to your user account to have this capability?

NO.39 Which role allows a user to connect to hosts using Real-Time Response?

NO.40 In order to exercise manual control over the sensor upgrade process, as well as prevent unauthorized users from uninstalling or upgrading the sensor, which settings in the Sensor Update Policy would meet this criteria?

NO.41 Once an exclusion is saved, what can be edited in the future?

NO.42 You have an existing workflow that is triggered on a critical detection that sends an email to the escalation team. Your CISO has asked to also be notified via email with a customized message. What is the best way to update the workflow?

NO.43 Which port and protocol does the sensor use to communicate with the CrowdStrike Cloud?

NO.44 Which is a filter within the Host setup and management > Host management page?

NO.45 What is the purpose of a containment policy?

NO.46 How does the Unique Hosts Connecting to Countries Map help an administrator?

NO.47 You want to create a detection-only policy. How do you set this up in your policy’s settings?

NO.48 What type of information is found in the Linux Sensors Dashboard?

NO.49 When configuring a specific prevention policy, the admin can align the policy to two different types of groups, Host Groups and which other?

NO.50 Which role will allow someone to manage quarantine files?