CCCS-203B · Question #168
Which permission is typically required for CrowdStrike Falcon to successfully register and monitor a cloud account?
The correct answer is B. IAM role with read-only permissions for specific services. Option A: This is incorrect because using root credentials poses significant security risks and is not a best practice. IAM roles are the recommended method for securely granting access. Option B: This is correct because CrowdStrike Falcon requires an IAM role with read-only…
Question
Which permission is typically required for CrowdStrike Falcon to successfully register and monitor a cloud account?
Options
- AAccess to the root account credentials
- BIAM role with read-only permissions for specific services
- CAdministrator Access policy for full control of the cloud account
- DGranting SSH access to all cloud-hosted virtual machines
How the community answered
(24 responses)- B92% (22)
- C4% (1)
- D4% (1)
Explanation
Option A: This is incorrect because using root credentials poses significant security risks and is not a best practice. IAM roles are the recommended method for securely granting access. Option B: This is correct because CrowdStrike Falcon requires an IAM role with read-only permissions to access and monitor cloud services, configurations, and logs. This minimizes risk while providing sufficient visibility into the cloud account for security monitoring. Option C: This is incorrect because granting full administrative access is unnecessary and violates the principle of least privilege. CrowdStrike does not require full control to monitor cloud Option D: This is incorrect because SSH access is irrelevant to the cloud account registration process. CrowdStrike monitors at the account and service level rather than accessing individual instances directly.
Topics
Community Discussion
No community discussion yet for this question.