When creating an API client for cloud account integration in CrowdStrike Falcon, which of the following is a required step?

Question

Options

• AConfigure the API client to use legacy authentication methods
• BAssign specific API scopes to limit the client's access
• CGrant the API client administrator privileges to all cloud accounts
• DGenerate a public-private key pair and upload the private key to Falcon

• A
  7% (2)
• B
  90% (27)
• D
  3% (1)

Explanation

Option A: This is incorrect because legacy authentication methods are less secure and not CrowdStrike uses token-based authentication for API clients. Option B: This is correct because assigning API scopes defines the level of access the API client has, ensuring the principle of least privilege is followed. For cloud account integration, API scopes like read, write, or view are tailored to the required tasks without over-provisioning access. Option C: This is incorrect because granting administrator privileges violates security best practices. Over-provisioning access can increase the risk of accidental or malicious actions. Option D: This is incorrect because CrowdStrike Falcon requires generating API keys within the platform rather than relying on external key-pair uploads.

No community discussion yet for this question.