CCCS-203b 무료 덤프문제 온라인 액세스

A security team at a multinational corporation detects suspicious activity on multiple cloud workloads protected by CrowdStrike Falcon Cloud Security. The team needs to properly report and escalate the incident for further investigation.
What is the best course of action to take immediately?

• A.Generate a CrowdStrike Incident Report and escalate it through the organization's Security Operations Center (SOC).
• B.Shut down all affected cloud workloads immediately, even before conducting a forensic analysis.
• C.Use Falcon Real Time Response (RTR) to immediately delete all files suspected of being malicious.
• D.Delete all security logs related to the incident to prevent attackers from covering their tracks.

When analyzing cloud findings for misconfigurations, which of the following would be considered a high-risk practice that should be flagged for remediation?

• A.Using network security groups (NSGs) to limit traffic to trusted IP addresses
• B.Allowing unrestricted inbound traffic to cloud-hosted resources on port 22
• C.Enforcing multi-factor authentication (MFA) for all cloud administrator accounts
• D.Implementing role-based access control (RBAC) policies for cloud resources

You are tasked with enabling image assessment for a container registry in CrowdStrike. Which of the following actions ensures that the registry credentials are properly obtained and integrated?

• A.Configure the registry URL and credentials in the CrowdStrike Falcon console's container settings.
• B.Set up a read-write access role in the container registry and use its credentials in CrowdStrike.
• C.Use the default credentials provided by CrowdStrike to connect to the registry.
• D.Import the container registry's certificate authority (CA) file into CrowdStrike to enable secure communication.

Which of the following is the most secure method to authenticate and configure a cloud account integration using the CrowdStrike APIs?

• A.Configure static IP-based allowlisting in the cloud provider for CrowdStrike's API endpoints.
• B.Utilize personal access tokens of an administrator user.
• C.Use API keys and rotate them monthly using an automated script.
• D.Leverage CrowdStrike-generated API client credentials and assign IAM roles with minimal privileges.

Your organization is deploying containerized applications in a cloud environment. You must ensure that container images are free of vulnerabilities before being deployed into production. The solution must integrate seamlessly with your CI/CD pipeline to automate image scanning during the build process.
Which image assessment method is in accordance with CrowdStrike best practices?

• A.Perform runtime analysis of the containers after they are deployed into production
• B.Manually inspect each container image in the repository for vulnerabilities before deployment
• C.Integrate pushing images for assessment into your CI/CD pipeline to detect vulnerabilities during the build process
• D.Wait until the images are running in production and rely on host-based security tools to monitor threats