Online Access Free CCCS-203b Exam Questions

A technology company is running a Kubernetes-based microservices architecture deployed across both on-premises data centers and multiple cloud environments, including AWS and Google Cloud. The security team wants a unified solution that provides runtime protection, threat detection, and container visibility across their hybrid cloud infrastructure.
Which CrowdStrike Falcon?sensor should they deploy?

• A.Falcon Sensor for Mobile Devices
• B.Falcon Cloud Workload Protection (CWP) Sensor
• C.Falcon Sensor for MacOS
• D.Falcon Forensic Collection Tool

During a review of the CrowdStrike Falcon asset inventory, you notice a legacy Windows XP device that is not running an endpoint protection solution. This asset has frequent outbound connections to unrecognized external IPs.
Which of the following is the best course of action to handle this risky asset?

• A.Uninstall the device from the asset inventory to reduce noise in monitoring.
• B.Quarantine the device using Falcon's network containment feature and initiate a vulnerability assessment.
• C.Ignore the asset as it might be part of a legitimate business process.
• D.Immediately block all outbound connections from this asset at the firewall.

Which feature of Falcon Horizon allows users to identify exposed cloud services and workloads running without requiring the deployment of a Falcon sensor?

• A.Vulnerability patching orchestration
• B.API-driven cloud workload discovery
• C.Deployment of lightweight monitoring agents
• D.Real-time behavioral monitoring

Which of the following scenarios would indicate a risky Azure Service Principal as identified by a Cloud Infrastructure Entitlement Manager (CIEM)?

• A.A Service Principal with "Reader" role assigned to an isolated development environment.
• B.A Service Principal with "Contributor" role used exclusively for deploying infrastructure.
• C.A Service Principal with an expired credential and no associated roles.
• D.A Service Principal with "Owner" role and no restrictions on its scope, accessible by an unused application.

How does CrowdStrike's Application Security Posture Management (ASPM) enhance container security?

• A.By identifying and fixing insecure configurations in code before deployment
• B.By scanning deployed pods
• C.By deploying agentless runtime protection
• D.By enforcing MFA on cloud users