1.3 Manage API Keys CCFA Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   An administrator is reviewing API key usage and notices that a key used by a reporting integration has not been used in 45 days. The integration is scheduled to run monthly. The administrator is considering whether to revoke the key. What is the most important factor to consider?

   • AWhether the integration is still needed and will run again.
   • BThe age of the API key.
   • CThe number of permissions on the API key.
   • DThe source IP address of the last API call.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   An administrator needs to rotate an API key that is currently used by a production script. What is the recommended sequence of actions?

   • ADelete the old key, create a new key, and update the script with the new key
   • BCreate a new key, update the script with the new key, then revoke the old key
   • CEdit the existing key to change its secret value
   • DRevoke the old key and immediately create a new key with the same name
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   An administrator is creating an API key for a new integration that will be used to manage Falcon Firewall Management. The integration needs to read and write firewall policies. What is the minimum set of scopes required?

   • AFirewall Management read and Firewall Management write.
   • BFirewall Management read, write, and Hosts read.
   • CFirewall Management read only.
   • DFirewall Management write only.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Why should an administrator regularly review the audit log for API key activity?

   • ATo ensure API keys are rotated at least once per month
   • BTo identify any unauthorized or anomalous usage of API keys
   • CTo check the current rate limit usage for each API key
   • DTo verify that API keys have the correct permissions
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   An administrator is creating an API key for a new automation that needs to retrieve host information and update host groups. The automation should not be able to modify prevention policies. Which set of scopes should the administrator assign?

   • AHosts read and Host Groups write.
   • BHosts read and Prevention Policies write.
   • CHosts read, Host Groups write, and Prevention Policies write.
   • DHosts write and Host Groups read.
   Reveal Solution Discussion Select an answer first