nerdexam
CrowdStrike

CCCS-203B · Question #39

CCCS-203B Question #39: Real Exam Question with Answer & Explanation

The correct answer is A. Enable "Dry Run Mode" in Falcon Fusion to simulate actions without applying them.. Option A: Enabling "Dry Run Mode" in Falcon Fusion is the correct step for simulating workflow actions without making changes to the actual resources. This mode allows you to verify that the workflow logic functions as expected, including detecting findings and simulating remedia

Question

You are performing a dry run of an automated remediation workflow designed to disable AWS security groups that allow unrestricted inbound traffic. Which step ensures that the dry run accurately evaluates the workflow without impacting resources?

Options

  • AEnable "Dry Run Mode" in Falcon Fusion to simulate actions without applying them.
  • BTemporarily revoke permissions to ensure the workflow cannot make changes.
  • CDeploy the workflow to a non-production environment for testing.
  • DUse CloudTrail logs to manually verify the workflow actions post-execution.

Explanation

Option A: Enabling "Dry Run Mode" in Falcon Fusion is the correct step for simulating workflow actions without making changes to the actual resources. This mode allows you to verify that the workflow logic functions as expected, including detecting findings and simulating remediation steps, without impacting live environments. Option B: Revoking permissions may prevent accidental changes, but it does not allow you to test the workflow logic fully, as the dry run mode simulates actions while still validating permissions. Option C: While testing in a non-production environment is a valid practice, it is not equivalent to a dry run, which explicitly avoids making changes. Option D: Reviewing logs is important for auditing, but it does not replace the need for a dry run, which provides upfront validation without impacting resources.

Community Discussion

No community discussion yet for this question.

Full CCCS-203B Practice