Which role should be assigned to a user who needs to perform administrative tasks such as managing users and configuring Falcon settings?

Custom role with only detection viewing

A Falcon administrator wants to grant a new analyst access to the console. What does the administrator assign to the analyst to define what the analyst can do?

A unique API token for each console feature

A direct list of individual permissions

A role that contains the appropriate permissions

A Falcon administrator is configuring access for a third-party auditor who needs to review detection data and export reports, but should NOT have access to any management functions or response actions. The auditor will only need access for a limited time. Which role assignment is most appropriate?

Assign the Falcon Administrator role to the auditor

Assign the Falcon Reader role to the auditor

Assign the Falcon Manager role to the auditor

Create a custom role with only the 'Reports' permission

What is the primary benefit of creating a custom role in Falcon?

It allows users to create their own roles

It provides a higher level of security than built-in roles

It allows you to combine specific permissions to tailor access to your organization's needs

It automatically grants all permissions to the assigned users

CrowdStrikeCertified Falcon Administrator (CCFA)

Domain 1Objective 1

1.1 Determine Roles Required for Access to Features and Functionality in the Falcon Console CCFA Practice Questions (Page 1)

Part of the User Management domain, which makes up ~12% of our current practice bank.

21questions here

5free pages

5concepts

Questions 1–5

1foundation · easy
Which role should be assigned to a user who needs to perform administrative tasks such as managing users and configuring Falcon settings?
Select an answer first
2foundation · easy
A Falcon administrator wants to grant a new analyst access to the console. What does the administrator assign to the analyst to define what the analyst can do?
Select an answer first
3expert · medium
A Falcon administrator is configuring access for a third-party auditor who needs to review detection data and export reports, but should NOT have access to any management functions or response actions. The auditor will only need access for a limited time. Which role assignment is most appropriate?
Select an answer first
4application · medium
A Falcon administrator needs to grant a user the ability to view and manage Falcon prevention policies, but the user should NOT have access to detections or response actions. Which built-in role should be assigned?
Select an answer first
5foundation · easy
What is the primary benefit of creating a custom role in Falcon?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCFA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CrowdStrike. “CCFA” is a trademark of its owner, used for identification only.