2.5 Troubleshoot Issues Related to Cloud Account Registrations CCCS Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A company is registering an AWS account that is part of an organization. The registration fails because the IAM role cannot be assumed. The administrator has confirmed the trust policy is correct. What should the administrator check next?

   • AEnsure the IAM role has the AdministratorAccess policy attached.
   • BVerify that the AWS account is in the same region as the CrowdStrike sensor.
   • CConfirm that the external ID is correct.
   • DCheck if an SCP is denying the sts:AssumeRole action.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   A cloud account registration fails with a timeout error. Which of the following is the most likely cause?

   • AThe cloud account ID is invalid.
   • BThe external ID is incorrect.
   • CA firewall is blocking outbound traffic from the cloud account to the CrowdStrike API.
   • DThe IAM role's permissions policy is missing the required actions.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   A registration attempt for an Azure subscription that is part of a management group fails because the required permissions are not inherited. Which of the following is the most likely cause?

   • AThe service principal was assigned permissions at the management group level, but the subscription is in a different management group.
   • BThe service principal is not registered in the tenant.
   • CThe subscription is suspended.
   • DThe management group has too many levels.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A GCP project registration fails with a 'connection refused' error. The administrator has verified the service account and permissions are correct. What is the most likely cause?

   • AThe GCP project is in a folder that has a resource location restriction policy.
   • BThe service account key is expired.
   • CThe GCP project has exceeded its API quota.
   • DA VPC firewall rule is blocking outbound traffic to CrowdStrike's endpoints.
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A company is registering an Azure subscription with CrowdStrike. The registration fails because the service principal cannot read the subscription's resources. The administrator has confirmed the service principal has the Reader role at the subscription level. What should the administrator check next?

   • ACheck that the subscription is not a 'free trial' subscription.
   • BConfirm that the service principal is enabled for Azure Active Directory authentication.
   • CEnsure that the service principal is assigned the Contributor role instead of Reader.
   • DVerify that the service principal has the required permissions in the management group hierarchy.
   Reveal Solution Discussion Select an answer first