3.4 Given a Use Case, Recommend a Runtime Sensor Policy Configuration CCCS Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which element is part of a threat model that informs runtime sensor policy selection?

   • AThe cloud region's availability zones
   • BThe workload's public IP address
   • CPotential attack vectors targeting the workload
   • DThe cost of the cloud subscription
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which of the following best describes the purpose of a CrowdStrike runtime sensor policy?

   • ATo configure the sensor's prevention, detection, and response settings for workloads
   • BTo define the network firewall rules for cloud workloads
   • CTo set up data encryption for cloud storage buckets
   • DTo manage identity and access management (IAM) roles for cloud accounts
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which scenario would require tuning a runtime sensor policy?

   • AThe workload's CPU usage is low
   • BThe sensor is not reporting any events
   • CA new legitimate application is being blocked by the sensor
   • DThe cloud bill is higher than expected
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which use case would benefit most from a runtime sensor policy with aggressive prevention settings?

   • AA reporting server with low sensitivity
   • BA development environment where code changes frequently
   • CA batch processing job that runs nightly
   • DA public-facing web application with high security requirements
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   When a runtime sensor policy generates false positives, what is the recommended first step?

   • ADisable the sensor to stop alerts
   • BIncrease prevention levels to block more
   • CAdjust the policy to reduce false positives while maintaining security
   • DIgnore the alerts and continue
   Reveal Solution Discussion Select an answer first