CrowdStrike CrowdStrike Certifications CCFA-200 Questions & Answers

• Question 151:

  Which of the following is a valid step when troubleshooting sensor installation failure?

  A. Confirm all required services are running on the system

  B. Enable the Windows firewall

  C. Disable SSL and TLS on the host

  D. Delete any available application crash log files

  Correct Answer: A

  A valid step when troubleshooting sensor installation failure is to confirm all required services are running on the system. This can help identify if there are any issues with the sensor service, the Windows Management Instrumentation service, or the Windows Remote Management service, which are required for the sensor to function properly. The other options are either incorrect or not helpful for troubleshooting sensor installation failure. Reference: CrowdStrike Falcon User Guide, page 29.

• Question 152:

  What information does the API Audit Trail Report provide?

  A. A list of analyst login activity

  B. A list of specific changes to prevention policy

  C. A list of actions taken via Falcon OAuth2-based APIs

  D. A list of newly added hosts

  Correct Answer: C

  The information that the API Audit Trail Report provides is a list of actions taken via Falcon OAuth2-based APIs. The API Audit Trail Report allows you to view and audit the activity and usage of the Falcon APIs by different API clients and users in your organization. You can use this report to monitor who accessed what data, when, and how via the Falcon APIs2. References: 2: Cybersecurity Resources | CrowdStrike