A. Synchronizing account metadata with the Falcon Console by uploading a CSV file.

B. Granting CrowdStrike permissions to access the cloud account via an API role or service account.

C. Activating vulnerability scanning for all container images in the account.

D. Deploying the CrowdStrike Falcon agent to all cloud workloads.

A. Managing encryption keys for sensitive cloud storage

B. Managing cloud infrastructure costs by monitoring usage and recommending cost-saving strategies

C. Automating the deployment of cloud resources across multi-cloud environments

D. Enforcing least-privilege access by identifying and remediating excessive permissions

A. Enable the "Audit Mode" to enforce runtime image assessment.

B. Specify the severity levels (e.g., Critical, High, Medium) for vulnerabilities to flag.

C. Enable the "Real-time Scanning" option to automatically block all unscanned images.

D. Assign the policy to a specific Kubernetes namespace only.

A. The container is likely compromised, and an attacker may be attempting lateral movement.
Investigate and isolate the container immediately.

B. The detection is a false positive caused by an automated update process. Mark the findings as benign and take no action.

C. The container is experiencing a misconfiguration issue with outbound networking. Restart the pod and reapply network policies.

D. The issue is likely due to the use of a non-root container user. Modify the container to run as root and retry the operation.

A. Install the CrowdStrike Falcon sensor on all virtual machines before starting the cloud registration process.

B. Generate an API key in the CrowdStrike Falcon Console and manually add it to the cloud provider's IAM policies.

C. Create a service-linked role in the cloud provider and allow CrowdStrike Falcon to assume the role for security monitoring.

D. Manually configure CrowdStrike Falcon to ingest log data from the cloud provider's security audit logs before registration.

A. Creating a custom script to compare installed packages with known vulnerabilities.

B. Manually reviewing the base image layers using a text editor.

C. Using a container security scanning tool to generate a software bill of materials (SBOM).

D. Using the apt-get list command inside the container to manually check package versions.

A. Enable Image Drift Detection with Runtime Visibility

B. Run a Manual Audit of Deployed Containers

C. Implement Network Segmentation for All Workload

D. Use Threat Intelligence Feeds to Block Threats at the Network Level

A. Temporarily open up the firewall to all inbound traffic for testing purposes

B. Check that you have allowlisted the IP addresses provided in the public-facing CrowdStrike documentation

C. Begin investigating another hypothesis as there is no way blocked traffic could be responsible

A. It automatically remediates all vulnerabilities in cloud environments without requiring administrator intervention

B. It continuously assesses cloud configurations against industry best practices and regulatory compliance frameworks to identify security risks

C. It only scans AWS environments and lacks support for multi-cloud security assessment

D. It replaces traditional cloud firewalls by blocking all traffic not originating from CrowdStrike- managed IP addresses

A. Disable the account registration feature temporarily

B. Immediately reset all user passwords

C. Check the email verification process to ensure users receive verification emails

A. Image name and Repository

B. Image tags and Image name

C. Repository and Image tags

D. Registry and Image name