Crowdstrike ccfa - Study guides, Class notes & Summaries

CrowdStrike: CCFA Exam Questions with 100% Correct Solutions Capabilities and Limitations: RTR READ ONLY ANALYST - ANSWER Capabilities and Limitations: + Can run a core set of read-only response commands to perform reconnaissance. - Cannot extract files, modify the device, or run certain scripts. - No access to "Edit and RunScript" tab. Capabilities and Limitations: RTR ACTIVE RESPONDER - ANSWER Capabilities and Limitations: + More access than RTR Read Only Analyst. + Can extract fil...

How do you Add a user? (How do you traverse through the UI to add a user) - ANSWER * ADMINISTRATIVE role for your Falcon subscription, such as FALCON ADMINISTRATOR is required * - Host setup and management > Falcon users > User management. - Click Add User in the upper right of the window. - Enter users email address, first name, last name. - Select one or more roles. - Click Add User

Installing sensor on virtual machine template? - ANSWER WindowsS /install CID=YOUR CID NO_START=1 Ensures sensor does not start until later so each vm can have a unique aid. Install sensor with Pay-As-you-Go Billing? - ANSWER WindowsS /install /quiet /norestart CID=your CIDBILLINGTYPE=Metered NO_START=1

Falcon Console Guest - answer-User MGN: - View Documentation and your own user profile. - View Support Portal User MGN: Falcon Administrator - answer-User MGN: - Access all functionality in the console with the exception of some RTR functionality. Workflow Author - answer-User MGN: - Create and edit workflows. - Re-execute failed workflows. - This role requires at least one other role to be able to access the falcon console. - Cannot include RTR actions unless also assigned the RTR ...