A Falcon administrator is configuring CID-wide management settings in General Settings. The administrator wants to ensure that all child CIDs have the same 'Detection Status' labels and the same 'Default Detection View'. Which actions should the administrator take? (Select all that apply.)

Use the API to update status labels in each child CID individually.

Set the 'Default Detection View' to 'Grid' in General Settings.

Enable 'CID-wide status management' in General Settings.

Create a new role that restricts status label changes in child CIDs.

A Falcon administrator is planning to change the 'Default Detection View' in General Settings from 'List' to 'Grid'. The organization has 100 users, and some users have customized their view to 'List'. The administrator wants to understand the impact on these users. What should the administrator expect?

Users will be prompted to choose between 'List' and 'Grid' on next login.

Users with custom views will retain their 'List' view.

All users, including those with custom views, will see the Grid view by default.

Only new users will see the Grid view; existing users will keep their current view.

An organization has a parent CID and several child CIDs. The security team wants to ensure that all analysts in every child CID see the same 'Severity' color scheme for detections. The administrator needs to make this change efficiently. What should the administrator do?

Use the Falcon API to update severity settings in each child CID individually.

Modify the 'Severity' settings in the parent CID's General Settings.

Create a new detection policy that includes severity color settings and apply it to all hosts.

Have each child CID administrator update their own severity settings.

A new Falcon administrator is tasked with reviewing the current CID-wide management settings for the organization. The administrator needs to find where these settings are located in the Falcon console. Where should the administrator navigate to access the CID-wide management settings?

Navigate to 'Hosts' > 'Host Groups' and select 'CID-wide settings'.

Navigate to 'Settings' > 'General Settings' in the Falcon console.

Navigate to 'Dashboard' > 'CID Overview' and select 'Management'.

Navigate to 'Detections' > 'Detection Settings' and click 'CID-wide'.

A Falcon administrator is considering changing the 'Default Detection View' from 'List' to 'Grid' in General Settings. The organization has 50 users across multiple child CIDs. What should the administrator expect after this change?

Users will be prompted to choose their preferred view on next login.

The change will only affect new users, not existing users.

Only users in the parent CID will see the Grid view by default.

All users will see the Grid view by default when they log in.

CrowdStrikeCertified Falcon Administrator (CCFA)

Domain 6Objective 4

6.4 Understand Configurations for CID Wide Management Within General Settings CCFA Practice Questions (Page 3)

Part of the Rules Configuration domain, which makes up ~13% of our current practice bank.

17questions here

4free pages

4concepts

Questions 11–15

11application · medium · select all that apply
A Falcon administrator is configuring CID-wide management settings in General Settings. The administrator wants to ensure that all child CIDs have the same 'Detection Status' labels and the same 'Default Detection View'. Which actions should the administrator take? (Select all that apply.)
Select an answer first
12expert · hard
A Falcon administrator is planning to change the 'Default Detection View' in General Settings from 'List' to 'Grid'. The organization has 100 users, and some users have customized their view to 'List'. The administrator wants to understand the impact on these users. What should the administrator expect?
Select an answer first
13application · medium
An organization has a parent CID and several child CIDs. The security team wants to ensure that all analysts in every child CID see the same 'Severity' color scheme for detections. The administrator needs to make this change efficiently. What should the administrator do?
Select an answer first
14application · easy
A new Falcon administrator is tasked with reviewing the current CID-wide management settings for the organization. The administrator needs to find where these settings are located in the Falcon console. Where should the administrator navigate to access the CID-wide management settings?
Select an answer first
15application · medium
A Falcon administrator is considering changing the 'Default Detection View' from 'List' to 'Grid' in General Settings. The organization has 50 users across multiple child CIDs. What should the administrator expect after this change?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCFA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CrowdStrike. “CCFA” is a trademark of its owner, used for identification only.