2.2 Determine Which Roles Are Required to Perform Actions with CrowdStrike Falcon® Cloud Security CCCS Practice Questions (Page 1)

Questions 1–5

1. 1application · easy

   A security analyst needs to review the continuous compliance monitoring results for all connected Azure subscriptions in Falcon Cloud Security. The analyst does not need to register new subscriptions or perform any remediation. Which role should be assigned to the analyst?

   • AFalcon Read-Only
   • BFalcon Administrator
   • CCloud Security - Remediation
   • DCloud Security - Registration
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which Falcon role is required to monitor cloud security findings and alerts in Falcon Cloud Security?

   • AFalcon Administrator
   • BFalcon Cloud Security - Viewer
   • CFalcon Malware Investigator
   • DFalcon Cloud Security - Admin
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which Falcon role is required to view the cloud security posture of registered accounts in Falcon Cloud Security?

   • AFalcon Cloud Security - Admin
   • BFalcon Operator
   • CFalcon Responder
   • DFalcon Cloud Security - Viewer
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A company has a strict separation-of-duties policy: the team that registers cloud accounts must not be able to view or alter detection rules, and the team that handles remediation must not be able to register new accounts. Both teams need to view the compliance posture. Which combination of role assignments satisfies all constraints?

   • AAssign Falcon Administrator to both teams
   • BAssign Falcon Read-Only to both teams, plus Cloud Security - Registration to the registration team and Cloud Security - Remediation to the remediation team
   • CAssign Cloud Security - Registration to the registration team and Cloud Security - Remediation to the remediation team
   • DAssign Cloud Security - Registration to the remediation team and Cloud Security - Remediation to the registration team
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A security team is implementing least privilege for Falcon Cloud Security. They have three users: User 1 registers accounts, User 2 monitors compliance, and User 3 remediates issues. The team also wants User 2 to be able to view remediation history but not execute remediations. What is the most appropriate role assignment for User 2?

   • ACloud Security - Registration
   • BFalcon Read-Only
   • CCloud Security - Remediation
   • DFalcon Administrator
   Reveal Solution Discussion Select an answer first