3.4 Given a Use Case, Recommend a Runtime Sensor Policy Configuration CCCS Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which component is typically part of a CrowdStrike runtime sensor policy?

   • AIdentity provider (IdP) integration settings
   • BPrevention settings that block malicious activity
   • CVirtual network peering configurations
   • DCloud storage lifecycle rules
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which of the following is a configuration option available in a CrowdStrike runtime sensor policy?

   • ADatabase replication factor
   • BVisibility settings that control which events are logged
   • CLoad balancer algorithm
   • DVirtual machine size selection
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A company has a mixed fleet of Windows and Linux servers. The security team applied a single runtime sensor policy with 'Extra Aggressive' prevention to all hosts. They notice that Linux servers are experiencing high CPU usage and some legitimate cron jobs are being blocked. Windows servers are performing normally. The team needs to reduce the impact on Linux while keeping the same protection level for Windows. What is the best approach?

   • AAdd exclusions for all cron jobs on Linux hosts and keep the policy at 'Extra Aggressive'.
   • BLower the prevention level to 'Moderate' for the entire fleet to reduce CPU usage on Linux.
   • CDisable the sensor on Linux hosts until the performance issue is resolved.
   • DCreate a separate policy for Linux hosts with 'Moderate' prevention and adjust visibility settings to reduce overhead.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   When analyzing a use case for a runtime sensor policy, which factor is most important to consider?

   • AThe workload's operating system and runtime environment
   • BThe number of users in the organization
   • CThe cloud provider's billing cycle
   • DThe color scheme of the cloud console
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What does a 'prevention level' setting in a runtime sensor policy control?

   • AThe frequency of sensor updates
   • BThe number of cloud regions monitored
   • CThe strictness of blocking actions taken by the sensor
   • DThe retention period for logs
   Reveal Solution Discussion Select an answer first