Even though you are a Falcon Administrator, you discover you are unable to use the "Connect to Host" feature to gather additional information which is only available on the host. Which role do you nee

The correct answer is A. Real Time Responder. The Real Time Responder role allows users to use the "Connect to Host" feature to gather additional information from the host, such as running processes, registry keys, files, etc. The other roles do not have this capability.

User and Role Management

Question

Even though you are a Falcon Administrator, you discover you are unable to use the "Connect to Host" feature to gather additional information which is only available on the host. Which role do you need added to your user account to have this capability?

Options

AReal Time Responder
BEndpoint Manager
CFalcon Investigator
DRemediation Manager

How the community answered

(23 responses)

A
91% (21)
B
4% (1)
C
4% (1)

Explanation

The Real Time Responder role allows users to use the "Connect to Host" feature to gather additional information from the host, such as running processes, registry keys, files, etc. The other roles do not have this capability.

Topics

#Real Time Response#RBAC#user roles#Connect to Host

Community Discussion

No community discussion yet for this question.

Full CCFA-200B Practice