CCCS-203b 試験問題を無料オンラインアクセス

Which of the following is a necessary requirement for deploying the Kubernetes protection agent in a containerized environment?

• A.Ensure the Kubernetes cluster has role-based access control (RBAC) enabled to support the agent's permissions.
• B.Assign full administrative privileges to all service accounts in the Kubernetes cluster.
• C.Enable the default Kubernetes audit logs and assume the agent will integrate without additional configuration.
• D.Install the agent directly on each container running within the Kubernetes cluster.

An organization wants to integrate their private image registry with CrowdStrike for image assessment.
What must they configure in CrowdStrike Falcon to register the connection?

• A.Install the CrowdStrike sensor on the container registry server.
• B.Use default connection settings, as CrowdStrike auto-discovers private registries.
• C.Specify the registry URL, credentials, and authentication method in the Falcon console.
• D.Open the container registry to public access for CrowdStrike to retrieve images.

An organization has a custom IOM rule in Falcon Cloud Security to detect SSH connections from unauthorized IP addresses. However, the security team needs to update the rule to exclude a newly added internal IP range.
What is the correct way to update this rule?

• A.Edit the IOM rule directly in the Falcon Cloud Security Console.
• B.Disable the IOM rule and configure AWS Security Groups to handle IP whitelisting instead.
• C.Delete the existing IOM rule and create a new one with the updated IP range.
• D.Use the Falcon CLI to modify the IOM rule in the underlying infrastructure.

A company is onboarding multiple cloud accounts to CrowdStrike Falcon and encounters a failure when attempting to register its Google Cloud Platform (GCP) project. The error message states that Falcon cannot access the project resources.
What is the most likely reason for this issue?

• A.The Google Cloud project must first be converted into an AWS account before it can be registered in CrowdStrike Falcon.
• B.The GCP project must have Falcon's external IP address manually added to its firewall rules to allow account registration.
• C.The required service account for CrowdStrike Falcon is missing or does not have the correct permissions assigned.
• D.The Falcon Console requires at least one workload in the Google Cloud project to have a CrowdStrike sensor installed before registration.

Which of the following is an effective step for identifying cloud vulnerabilities related to improper configuration?

• A.Perform regular vulnerability scans with tools that support cloud environments
• B.Rely on default security settings provided by cloud service providers
• C.Grant all users administrator-level permissions for easier troubleshooting
• D.Disable logging to reduce storage costs and simplify analysis