CrowdStrikeCertified Falcon Administrator (CCFA)
Domain 7Objective 1
7.1 Understand the Different Types of Sensor Reports and Their Use Cases CCFA Practice Questions (Page 1)
Part of the Dashboards and Reports domain, which makes up ~5% of our current practice bank.
10questions here
2free pages
3concepts
Questions 1–5
- 1
An administrator wants to see which hosts are missing the sensor entirely. Which sensor report is most appropriate for this need?
Select an answer first - 2
Which sensor report type in the Falcon console provides a list of hosts that have not had the sensor installed or have had it uninstalled?
Select an answer first - 3
An administrator is asked to provide a report showing the last time each endpoint checked in with the Falcon cloud. This data will be used to identify potentially stale or orphaned hosts. Which sensor report type should be used?
Select an answer first - 4
A Falcon administrator is managing a mixed environment with Windows, macOS, and Linux endpoints. The administrator needs to provide a report to management that shows the total number of endpoints per operating system. The report should be a high-level summary, not a per-host list. Which sensor report type should be used?
Select an answer first - 5
A security analyst is investigating a potential compromise and needs to see the most recent check-in time, last IP address, and current sensor version for a specific host. The analyst needs this information in a single, focused view for that one endpoint. Which sensor report type is most appropriate?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CrowdStrike. “CCFA” is a trademark of its owner, used for identification only.