2.5 Troubleshoot Issues Related to Cloud Account Registrations CCCS Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A company is registering multiple AWS accounts under an organization. The management account registers successfully, but a member account fails with an error that the IAM role cannot be created. The administrator has full permissions in the member account. What is the most likely cause?

   • AAn SCP is attached to the member account that denies the iam:CreateRole action.
   • BThe member account is not in the same region as the management account.
   • CThe member account is a 'lite' account that does not support IAM roles.
   • DThe member account has not been configured with a billing alarm.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A security engineer is registering an AWS account with CrowdStrike. The registration fails with an error indicating that CrowdStrike cannot assume the required IAM role. The engineer confirms the account ID and external ID are correct. What should the engineer check next?

   • AEnsure that the IAM role name is exactly 'CrowdStrike' and that it is created in the same region as the CrowdStrike sensor.
   • BCheck that the AWS account has an active support plan that includes IAM role assumption.
   • CVerify that the IAM role's trust policy allows the CrowdStrike service principal to assume the role with the correct external ID.
   • DConfirm that the IAM role has a policy granting permissions to list all S3 buckets in the account.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   An administrator is registering an AWS account and receives an error that the external ID does not match. The administrator copied the external ID from the CrowdStrike portal. What is the most likely cause?

   • AThe IAM role's trust policy does not include the external ID condition.
   • BThe IAM role name is incorrect.
   • CThe AWS account ID is incorrect.
   • DThe external ID was entered with a trailing space or an incorrect character.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   A user is registering an AWS account in CrowdStrike and receives an error that the account ID is invalid. Which of the following is the most likely cause?

   • AThe cloud account is part of an AWS Organization.
   • BThe IAM role's permissions policy is missing the required actions.
   • CThe network firewall is blocking the registration request.
   • DThe account ID was entered with a typo or incorrect digits.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A GCP project registration fails with an error that the project ID is not found. The administrator has verified the project ID is correct. What should the administrator do?

   • ARecreate the project with a different ID.
   • BVerify that the service account has the Owner role on the project.
   • CCheck that the project is in the 'Active' state.
   • DEnsure that the project ID is entered without any typos or extra characters.
   Reveal Solution Discussion Select an answer first