CrowdStrike CCFA-200 認定試験の出題範囲:
| トピック | 出題範囲 |
|---|
| トピック 1 | - Host Management & Setup: In this section of the exam, the topics covered include the understanding of the filtering process in the Host Management page and how to disable detection for a host. Moreover, it covers how to explain the impact of disabling detections on a host and what is the effect of Reduced Functionality Mode (RFM). Finally, it covers how to identify hosts in RFM.
|
| トピック 2 | - Rule Configuration: In this section of the exam, the focus is on creating custom IOA rules to monitor for behavior that is not malicious. It also covers how to interpret business needs to ensure trusted activity and address false
|
| トピック 3 | - Group Creation: In this section of the exam, topics covered include how to determine the appropriate group assignment for endpoints and understand how it can affect the implementation of policies.
|
| トピック 4 | - Policy Application: In this section of the exam, it is identified how to utilize the appropriate prevention policy settings for endpoints. It covers how to determine the appropriate sensor update policy settings for controlling the procedure of update. It also covers how to apply roles and policy settings and monitor RTR audit logs.
|
| トピック 5 | - Sensor Deployment: This section covers topics such as how to determine the prerequisites to successfully install a Falcon sensor on operating systems. It also includes examining default policies and how to apply the best practices to prepare workloads for Falcon Sensor. Finally, it covers how to uninstall a Falcon Sensor.
|
| トピック 6 | - Dashboards and Reports: In this section of the exam, the focus is given to understanding the different types of sensor reports and their use cases. It also covers how to comprehend various audit logs and their use cases.
|
参照:https://www.crowdstrike.com/wp-content/uploads/2022/09/csu-cfcp-certification-guide.pdf
CrowdStrike CCFA-200 試験概要:
| 認定ベンダー: | CrowdStrike |
| 試験名: | CrowdStrike Certified Falcon 管理者 |
| 試験番号: | CCFA-200 |
| 受験料: | USD 250 |
| 認定の有効期間: | 3年 |
| 関連資格: | CrowdStrike Certified Falcon Responder (CCFR) CrowdStrike Certified Falcon Hunter (CCFH) CrowdStrike Certified SIEM アナリスト (CCSA) CrowdStrike Certified SIEM エンジニア (CCSE) CrowdStrike Certified Identity スペシャリスト (CCIS) CrowdStrike Certified Cloud スペシャリスト (CCCS) |
| 対応言語: | 英語 |
| 試験時間: | 90 minutes |
| 合格点: | 一般には公開されていません(CrowdStrike の合格要件を満たす必要があります) |
| 試験形式: | 多肢選択問題 |
| 出題数: | 60 |
| サンプル問題: | CrowdStrike CCFA-200 サンプル問題 |
| 受験方法: | Pearson VUE OnVUE を通じたオンライン受験、または Pearson VUE 認定試験センターでの受験 |
| 前提条件: | CrowdStrike Falcon プラットフォームでの実践経験が少なくとも 6 か月あること、および CrowdStrike Certification Exam Agreement に同意することが推奨されます |
| 公式シラバスのURL: | https://www.pearsonvue.com/us/en/crowdstrike.html |