최신CrowdStrike Certified Cloud Specialist - CCCS-203b무료샘플문제

A. The AWS account must be linked to an Azure subscription before it can be registered in CrowdStrike Falcon.

B. The Falcon role needs to be assigned to an AWS Lambda function for it to be recognized during the registration process.

C. The CrowdStrike Falcon Console does not support AWS account registrations unless the Falcon sensor is installed on at least one EC2 instance.

D. The role was created, but it was not granted the required permissions or trust policy for CrowdStrike Falcon to assume it.

A. Navigate to the "Image Assessment" page, select the specific registry connection, and click
"Delete."

B. Use the "Bulk Delete" option to remove all registry connections, including the one you want to delete.

C. Disable the "Image Assessment" feature globally and then remove the registry details.

D. Remove all associated images from the registry before attempting to delete the connection.

A. MITRE Tactic and Technique - Service

B. Attack type - Service

C. MITRE Tactic and Technique - Cloud provider

D. Attack type - Cloud provider

A. Not specifying a WORKDIR in the Dockerfile

B. Excluding metadata labels in the Dockerfile

C. Running the container as the root user

D. Using a base image tagged as "latest"

A. The Linux server must have Docker installed as the only supported container runtime.

B. The Linux server must run a kernel version that is supported by the Falcon sensor.

C. The Linux server must be running in a bare-metal environment, as virtual machines are not supported.

D. The server must disable all other antivirus or endpoint security software before installation.

A. Monitors and enforces security policies in any containerized environment

B. Forwards Kubernetes event logs to CrowdStrike NG SIEM

C. Provides security visibility into EKS, AKS, and self-managed clusters

A. An account with no configured security policy for additional authentication factors.

B. An account that uses only an SSH key pair for authentication.

C. An account that prompts users to enter a code sent to their email in addition to their password.

D. An account that requires a username and password to log in.

A. Delete all permissions for the account immediately.

B. Implement the principle of least privilege by aligning permissions with the account's actual usage.

C. Transfer the account's permissions to a shared admin account for operational efficiency.

D. Downgrade permissions to "read-only" for all resources.

A. Add the IP addresses of CrowdStrike's regional data centers.

B. Add CrowdStrike IP addresses to the denylist of your firewall for enhanced security.

C. Add the CrowdStrike IP addresses provided in the CrowdStrike Console.

D. Add IP addresses from the organization's internal network.

A. Directly input the cloud provider's credentials into the CrowdStrike console.

B. Generate an API client ID and secret in the CrowdStrike Falcon console.

C. Use the CrowdStrike API to configure granular IAM policies before registration.

D. Assign full administrator access to the CrowdStrike service account in the cloud provider.

A. Directly upload API credentials to the CrowdStrike Falcon Console without generating an API client.

B. Manually deploy CrowdStrike agents on all workloads before registering the account via APIs.

C. Provide read-only API access to the Falcon platform for monitoring and reporting.

D. Generate an API client with appropriate permissions and use it to authenticate and register the cloud account.

A. Execution

B. Defense Evasion

C. Persistence

D. Privilege Escalation

A. To replace the Kubernetes control plane with a secure alternative provided by CrowdStrike.

B. To monitor and secure containerized applications by detecting runtime threats within Kubernetes clusters.

C. To automatically scale Kubernetes clusters based on threat levels.

D. To manage Kubernetes cluster configurations directly from the Falcon console.