CrowdStrikeCCFA-200b92 cards6 domains

CCFA-200b Flashcards

Active recall study cards for the CrowdStrike Certified Falcon Administrator exam. Flip each card to reveal the answer, filter by domain, or shuffle for spaced repetition.

0 / 92 cards reviewed0% done

Card 1 of 92

user-access-management

What are the two conditions that BOTH must be met before a user can initiate a Real Time Response (RTR) session?

Click to reveal answer

Answer

The response policy must have RTR enabled on the endpoint side, AND the user must have an RTR role (Active Responder or Administrator) assigned to their account. Either condition alone is insufficient.

Click to flip back

Tip: Use Space to flip, ← / → to navigate

Ready for the real thing?

Take a timed CCFA-200bmock exam to test what you've learned.