CCCS-203b 試験問題を無料オンラインアクセス

After identifying inactive users using the CrowdStrike CIEM/Identity Analyzer, what is the most appropriate action to mitigate risks associated with these accounts?

• A.Transfer the permissions of inactive accounts to active users for operational efficiency.
• B.Immediately delete all inactive user accounts.
• C.Deactivate inactive accounts but retain their associated roles and permissions.
• D.Temporarily disable inactive accounts and monitor for unexpected activity before permanent action.

Where can you check the current status of accounts and identify deployment misconfigurations?

• A.Cloud security - Settings - Cloud posture scan settings
• B.Cloud security - Settings - Account registration
• C.Cloud security - Settings - Automate
• D.Cloud security - Policies - Cloud security posture

When configuring CrowdStrike to perform an image assessment, which step is required to obtain registry credentials for a container registry from the approved registry list?

• A.Use a command-line tool to authenticate with the container registry and export the credentials to a file.
• B.Configure the container registry to push credentials to CrowdStrike via a webhook.
• C.Use the CrowdStrike API to directly retrieve credentials from the registry.
• D.Generate a service account key with read-only access to the container registry.

A containerized workload that spawns a background shell process outside of its original image configuration is considered a _____ event.

• A.validation
• B.benchmark
• C.kill-chain
• D.drift

Which of the following is a valid use case for deploying a Falcon Fusion workflow?

• A.Automatically isolating an endpoint when a high-severity detection is flagged.
• B.Providing detailed analysis of endpoint vulnerabilities over the past year.
• C.Generating monthly billing reports for CrowdStrike subscriptions.
• D.Deploying software updates across all managed endpoints.