A Falcon administrator has created a custom dashboard that displays sensitive detection data. The dashboard is currently shared with the entire security team. A new policy requires that only the incident response (IR) team can view the dashboard, and the rest of the security team should not have access. What is the most effective way to update the dashboard's sharing settings?

Use the 'Restrict Access' feature to limit the dashboard to specific users.

Create a new dashboard and copy the widgets, then share the new dashboard with the IR team.

Keep the dashboard shared with the security team but change the widget permissions to restrict access.

Change the dashboard's sharing to 'Private' and then share it with the IR team group.

After finishing a custom dashboard, what must a user do to ensure the changes are retained and available for future use?

Take a screenshot for documentation

Share the dashboard with all users

A user creates a custom dashboard and wants to give it a descriptive name and a short description. Where are these settings configured?

In the Falcon platform's global preferences

In the Advanced Event Search query builder

In the Windows registry of the local machine

In the dashboard's settings or edit mode

What does the sharing or visibility setting of a custom dashboard control?

Which users or groups can view or edit the dashboard

The refresh rate of the dashboard widgets

The default time range for all widgets

The data retention period for event search results

Where in the Falcon platform does a user find the option to create a new custom dashboard?

In the 'Settings' menu under 'API Keys'

In the left navigation under 'Dashboards'

In the 'Investigate' menu under 'Event Search'

In the 'Hosts' menu under 'Sensor Download'

CrowdStrikeCertified Falcon Hunter (CCFH)

Domain 4Objective 8

4.8 Create a Custom Dashboard to Display Advanced Event Search Results CCFH Practice Questions (Page 1)

Part of the Event Search domain, which makes up ~19% of our current practice bank.

13questions here

3free pages

4concepts

Questions 1–5

1expert · hard
A Falcon administrator has created a custom dashboard that displays sensitive detection data. The dashboard is currently shared with the entire security team. A new policy requires that only the incident response (IR) team can view the dashboard, and the rest of the security team should not have access. What is the most effective way to update the dashboard's sharing settings?
Select an answer first
2foundation · easy
After finishing a custom dashboard, what must a user do to ensure the changes are retained and available for future use?
Select an answer first
3foundation · easy
A user creates a custom dashboard and wants to give it a descriptive name and a short description. Where are these settings configured?
Select an answer first
4foundation · easy
What does the sharing or visibility setting of a custom dashboard control?
Select an answer first
5foundation · easy
Where in the Falcon platform does a user find the option to create a new custom dashboard?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCFH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CrowdStrike. “CCFH” is a trademark of its owner, used for identification only.