CCIS: CrowdStrike Certified Identity Specialist

CCIS: CrowdStrike Certified Identity Specialist practice questions, page 2 of 5, with answer review and explanations.

Question 6

Given the detection exclusion shown above, which answer CORRECTLY describes how this would work regarding the “Suspicious protocol implementation (pass the hash)” detection?

  1. It WILL trigger when Domain Admins attempt this activity against domain controllers, as long as the source host has a Zero Trust Assessment score of 90+
  2. It will NOT trigger when Domain Admins attempt this activity against domain controllers as long as the source host has a Zero Trust Assessment score of 90+
  3. It will NOT trigger when Domain Admins attempt this activity against domain controllers, as long as the domain controllers have a Zero Trust Assessment score of 90+
  4. It will NOT trigger when any privileged user attempts this activity against domain controllers, as long as the source host has a Zero Trust Assessment score of 90+

Question 7

Given information from the Falcon Identity Protection detection shown in the figure above, which of the following responses is TRUE?

  1. User bbanner typically uses computer CAST-EAGLE-ADMN, but is seen logging into another computer
  2. User bbanner does not typically use CAST-EAGLE-ADMN, but is seen logging into this computer
  3. User bbanner logged into privileged computer CAST-EAGLE-ADMN, which should not be allowed
  4. User CAST-EAGLE-ADMN logged into computer bbanner, which is unusual

Question 8

What needs to be added to the following Fusion Workflow in order to monitor entities related to these particular endpoint detections?

  1. Add user and endpoint to marked list
  2. Network contain user and endpoint
  3. Add user and endpoint to watchlist
  4. Get device details and add endpoint to host group

Question 9

Which of the following are not included within the three-dot menu on Identity-based Detections?

  1. Edit status
  2. Add comment
  3. Add exclusion
  4. Add to Watchlist

Question 10

The Risk Matrix shows the risks rated by two parameters, what are they?

  1. Likelihood and Consequences
  2. Rarity and Visibility
  3. Exposure and Severity
  4. Complexity and Quantity