Free CrowdStrike CrowdStrike-Cloud Exam Questions

Become CrowdStrike Certified with updated CrowdStrike-Cloud exam questions and correct answers

Page: 1 / 48

Total 240 Questions | Updated On: Feb 17, 2025

Add To Cart

Question 1

What is the primary purpose of creating Falcon Cloud Security Policies and Rules in a cloud environment?

A : To configure network ingress and egress rules for cloud-native firewalls.

B : To enforce granular security controls for workloads, users, and cloud resources based on predefined conditions.

C : To manage the deployment of Falcon agents across virtual machines.

D : To automate software updates for containerized applications in the cloud.

Answer: B

Question 2

What is the primary purpose of creating Falcon Cloud Security Policies and Rules in a cloud environment?

A : To configure network ingress and egress rules for cloud-native firewalls.

B : To enforce granular security controls for workloads, users, and cloud resources based on predefined conditions.

C : To manage the deployment of Falcon agents across virtual machines.

D : To automate software updates for containerized applications in the cloud.

Answer: B

Question 3

After identifying an account with unnecessary access privileges using the CrowdStrike CIEM/Identity Analyzer, what is the best action to mitigate risks?

A : Transfer the account's permissions to a shared admin account for operational efficiency.

B : Delete all permissions for the account immediately.

C : Downgrade permissions to "read-only" for all resources.

D : Implement the principle of least privilege by aligning permissions with the account's actual usage.

Answer: D

Question 4

What is the primary purpose of creating Falcon Cloud Security Policies and Rules in a cloud environment?

A : To configure network ingress and egress rules for cloud-native firewalls.

B : To enforce granular security controls for workloads, users, and cloud resources based on predefined conditions.

C : To manage the deployment of Falcon agents across virtual machines.

D : To automate software updates for containerized applications in the cloud.

Answer: B

Question 5

A security team is tasked with creating an image assessment policy in the Falcon Cloud to scan container images for vulnerabilities before deployment. Which of the following configurations is required to ensure the policy works as intended?

A : Enable the "Audit Mode" to enforce runtime image assessment.

B : Enable the "Real-time Scanning" option to automatically block all unscanned images.

C : Assign the policy to a specific Kubernetes namespace only.

D : Specify the severity levels (e.g., Critical, High, Medium) for vulnerabilities to flag.

Answer: D

Page: 1 / 48

Total 240 Questions | Updated On: Feb 17, 2025

Add To Cart