2.5 Troubleshoot Issues Related to Cloud Account Registrations CCCS Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company is registering an Azure subscription that is part of a management group. The registration fails because the service principal cannot read resources. The service principal has the Reader role on the subscription. What should the administrator check?

   • AConfirm that the service principal is enabled for Azure Active Directory authentication.
   • BEnsure the service principal is assigned the Contributor role.
   • CVerify that the subscription is not in a 'decommissioned' state.
   • DCheck if a management group policy is denying read access to the service principal.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   A cloud account registration fails with the error: "The external ID provided does not match the external ID in the trust policy." What is the most likely cause of this failure?

   • AThe IAM role's trust policy contains an incorrect external ID.
   • BThe cloud account is part of an organization that has not been enabled.
   • CThe network firewall is blocking traffic to the CrowdStrike API.
   • DThe cloud account has insufficient compute resources.
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A company uses AWS Organizations with multiple member accounts. When registering a member account with CrowdStrike, the registration fails because the required IAM role cannot be created. The administrator has full permissions in the member account. What is the most likely cause?

   • AAn SCP in the organization is denying the creation of the IAM role.
   • BThe IAM role must be created in the management account, not the member account.
   • CThe member account has not been activated for IAM usage.
   • DThe member account is not part of the organization's root account.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A company is registering a GCP project that is part of a folder hierarchy. The registration fails because the service account cannot access resources. The service account has the required roles at the project level. What should the administrator check?

   • AEnsure the service account is assigned the Owner role at the project level.
   • BCheck if a folder-level IAM policy is denying the service account's access.
   • CConfirm that the service account key is not expired.
   • DVerify that the project is in the 'Active' state.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   An administrator is registering an AWS account and receives an error that the account ID is invalid. The administrator copied the account ID from the AWS console. What should the administrator do?

   • AVerify that the account ID is entered without any extra characters or spaces.
   • BCheck that the account has the required IAM role.
   • CEnsure that the account is not a 'sandbox' account.
   • DRecreate the account in AWS Organizations.
   Reveal Solution Discussion Select an answer first