CCIS: CrowdStrike Certified Identity Specialist

CCIS: CrowdStrike Certified Identity Specialist practice questions, page 5 of 5, with answer review and explanations.

Question 21

What is the recommended action for the "Guest Account Enabled" risk?

  1. Disable the endpoint in Active Directory
  2. Disable Guest accounts on all endpoints
  3. Apply a policy rule with an "Access" trigger and "Block" action on the Guest account
  4. Add related endpoints to a watchlist

Question 22

Subnets can be setup as one of the following types: Internal, _______________, WIFI, or NAT.

  1. LAN
  2. VPN
  3. External
  4. Firewall

Question 23

How does CrowdStrike Falcon Identity Protection help customers identify different types of accounts in their domain?

  1. Analyzes authentication traffic and automatically classifies programmatic and human accounts
  2. Implements advanced encryption algorithms for account metadata
  3. Assigns a human authorizer to each programmatic account for approval
  4. Conducts regular vulnerability assessments on programmatic accounts

Question 24

Which of the following API permissions are required in order to add/remove an entity to a watchlist?

  1. Identity Protection Entities: Write
  2. Identity Protection GraphQL: Write
  3. Identity Protection Assessment Write & Identity Protection GraphQL: Write
  4. Identity Protection Entities Write & Identity Protection GraphQL: Write