4.2 Apply Best Practices When Managing Host Groups CCFA Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is the purpose of configuring role-based access control (RBAC) for host groups in CrowdStrike Falcon?

   • ATo automatically assign hosts to groups based on their operating system
   • BTo encrypt the data transmitted between hosts and the Falcon cloud
   • CTo monitor host group membership changes in real time
   • DTo restrict who can view, modify, or manage host groups based on their role
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   An organization has a compliance requirement to review all changes to host group membership and policy assignments on a weekly basis. The security team wants to automate this review process. Which approach should the administrator take?

   • AManually review the audit logs in the Falcon console each week.
   • BCreate a custom role that only allows viewing audit logs and assign it to a compliance officer.
   • CUse the Falcon API to export audit logs and host group configurations, and schedule a script to compare them weekly.
   • DEnable email notifications for all host group changes and review them weekly.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which principle is most directly supported by configuring RBAC for host groups?

   • ALeast privilege
   • BHigh availability
   • CData encryption
   • DScalability
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the purpose of using policy overrides in a host group hierarchy?

   • ATo automatically apply the same policy to all child groups
   • BTo prevent any policy from being applied to the child group
   • CTo permanently delete the parent group's policy
   • DTo tailor settings for a specific child group while still inheriting the parent's policy as a baseline
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is a key benefit of designing a logical host group hierarchy in CrowdStrike Falcon?

   • AIt automatically installs the Falcon sensor on all hosts
   • BIt allows for the efficient assignment and management of policies across groups
   • CIt ensures that all hosts have the same security policies
   • DIt eliminates the need for dynamic membership rules
   Reveal Solution Discussion Select an answer first