A cloud security analyst needs to view the compliance posture of all connected cloud accounts and also needs to register a new account that was recently added to the organization. The analyst should not be able to remediate issues. Which role or roles should be assigned?

Assign both Falcon Read-Only and Cloud Security - Registration roles

Assign the Falcon Administrator role

Assign the Cloud Security - Registration role only

Assign the Cloud Security - Remediation role

An organization uses a third-party automation tool that needs to register new cloud accounts and execute remediation actions, but it should not be able to manage Falcon users or modify detection rules. The tool authenticates as a service principal. What is the best role assignment for this service principal?

Assign the Cloud Security - Registration role only

Assign the Falcon Administrator role

Assign both Cloud Security - Registration and Cloud Security - Remediation roles

Assign the Falcon Read-Only role

CrowdStrikeCertified Cloud Specialist (CCCS)

Domain 2Objective 2

2.2 Determine Which Roles Are Required to Perform Actions with CrowdStrike Falcon® Cloud Security CCCS Practice Questions (Page 3)

Part of the Cloud Account Registration domain, which makes up ~15% of our current practice bank.

16questions here

4free pages

3concepts

Questions 11–15

11application · medium
A cloud security analyst needs to view the compliance posture of all connected cloud accounts and also needs to register a new account that was recently added to the organization. The analyst should not be able to remediate issues. Which role or roles should be assigned?
Select an answer first
12foundation · easy
A user needs to view compliance reports in Falcon Cloud Security but should not be able to make any changes. Which role should be assigned to this user?
Select an answer first
13expert · hard
An organization uses a third-party automation tool that needs to register new cloud accounts and execute remediation actions, but it should not be able to manage Falcon users or modify detection rules. The tool authenticates as a service principal. What is the best role assignment for this service principal?
Select an answer first
14foundation · easy
A service principal is used by an automated script to remediate misconfigurations in Falcon Cloud Security. Which role should be assigned to the service principal to enable remediation actions while following least privilege?
Select an answer first
15application · medium
A cloud security team is onboarding a new AWS account into Falcon Cloud Security. The team lead needs to grant a junior engineer the ability to initiate the registration workflow and view the resulting compliance posture, but must NOT allow the engineer to modify any detection or remediation settings. Which Falcon role should be assigned?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCCS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CrowdStrike. “CCCS” is a trademark of its owner, used for identification only.

2.2 Determine Which Roles Are Required to Perform Actions with CrowdStrike Falcon® Cloud Security CCCS Practice Questions (Page 3)

Questions 11–15

A cloud security analyst needs to view the compliance posture of all connected cloud accounts and also needs to register a new account that was recently added to the organization. The analyst should not be able to remediate issues. Which role or roles should be assigned?

A user needs to view compliance reports in Falcon Cloud Security but should not be able to make any changes. Which role should be assigned to this user?

A service principal is used by an automated script to remediate misconfigurations in Falcon Cloud Security. Which role should be assigned to the service principal to enable remediation actions while following least privilege?

Keep studying — Cloud Account Registration