Free CrowdStrike CCFA-200b Exam Dumps Questions & Answers

Where can you find the history of the successes and failures for any Fusion SOAR workflows?

• A.  Falcon UI Audit Trail
• B.  Custom Alert History
• C.  Workflow Audit log
• D.  Workflow Execution log

What happens to detections in the console after clicking "Disable Detections" for a host from within the Host Management page?

• A.  Existing detections for the host remain
• B.  All detection data for the host is deleted and the host is hidden from view
• C.  The detections for the host are removed from the console immediately
• D.  New detections are disabled for 30 days

Your incident responder team is migrating existing workflows into Fusion SOAR workflows so that they execute natively in Falcon. The workflow imports are failing. What format must the workflows be in order to successfully import them into Fusion SOAR?

• A.  JSON
• B.  YAML
• C.  CSV
• D.  SOAR

In order to receive the most stable sensor updates, what level of automatic sensor updates should be applied to a host?

• A.  Pinned sensor version
• B.  Auto-N-1
• C.  Auto-Latest
• D.  Auto-N-2

Using Host setup and management inside the Falcon Console, how can you display sensors in Reduced Functionality Mode?

• A.  From Sensor health, sort using the column heading Sensor status
• B.  From Sensor status, click on the widget RFM
• C.  From Host management, filter for RFM
• D.  From Host status, filter for RFM