About the Exam

CrowdStrike certification for practitioners who secure cloud workloads with the Falcon platform. It covers cloud security posture management, cloud workload protection, container and Kubernetes security, and the investigation of cloud-based detections. Passing demonstrates the ability to configure and operate Falcon Cloud Security in a production environment.

Exam Topics

Falcon Cloud Security Features and Services14%
Cloud Account Registration14%
Cloud Security Policies and Rules14%
Pre-Runtime Protection14%
Runtime Protection14%
Findings and Detection Analysis14%
Remediating and Reporting Issues14%

How to Use This Practice Exam

Browse — Read each question, select your answer, and reveal the explanation.
Exam Mode — Simulate real exam conditions with a timed session and score report.
Learn Mode — Spaced repetition schedules questions you struggle with for long-term retention.

Download the Full Exam PDF

Get every question and answer in a clean, printable PDF built for offline study. Purchase once, keep permanent access, and re-download the latest version anytime.

Get PDF

Learn More

Last updated June 5, 2026 at 2:45 PM

Topic filter

Question status

Question sort

Questions per page

QuestionQ1

Falcon Cloud Security Features and Services

As a Falcon Administrator, you need to grant an analyst access to view compliance details for all cloud assets in the Falcon Console.

Which least-privilege role should you assign?

Explanation

The Cloud Compliance Viewer role provides view access to cloud compliance information without granting cloud-security or Kubernetes/container management capabilities. It is the least-privilege role for viewing compliance details across cloud assets.

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ2

Pre-Runtime Protection

Which Falcon Cloud Security capability assesses the security posture of EC2 instances to identify those that would benefit from a sensor for real-time protection?

Explanation

1-click sensor deployment discovers unmanaged EC2 workloads and enables deployment of the Falcon sensor, which supplies real-time protection. Snapshot scanning is agentless and point-in-time, while DSPM and Helm Charts serve different purposes.

Learn more

CrowdStrike AWS Cloud Registration Terraform module: Sensor Management

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ3

Findings and Detection Analysis

You need to receive notification when administrator-level privileges are programmatically granted.

Which capability provides visibility into this behavior across multiple providers?

Explanation

Cloud Identity Analyzer provides cross-provider visibility into cloud identity risks, including programmatic privilege escalation and grants of administrator-level permissions. Admission controls apply to Kubernetes resource admission, and container or image assessments analyze container security rather than cloud IAM privilege changes.

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ4

Falcon Cloud Security Features and Services

Which service is needed to automate one-click deployment directly from the CrowdStrike Falcon console?

Explanation

AWS Systems Manager provides managed-node automation and remote command execution, including automating software installations at scale. Falcon’s AWS one-click deployment uses this capability to install the Falcon sensor on eligible workloads.

Learn more

What is AWS Systems Manager?

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ5

Findings and Detection Analysis

How does CrowdStrike detect risky use of credentials and permissions in your cloud accounts?

Explanation

Cloud Identity Analyzer examines cloud identities and entitlements to identify risky permissions, overly permissive accounts, identity misconfigurations, and unwanted access, supporting least-privilege enforcement.

Learn more

CrowdStrike Cloud Security Extends New CIEM Capabilities

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ6

Cloud Account Registration

When registering with AWS, which option is recommended to improve your security posture?

Explanation

1-click sensor deployment helps extend protection to unmanaged workloads by automating their discovery and streamlining Falcon sensor deployment across the AWS environment. This increases coverage and reduces security blind spots.

Learn more

CrowdStrike AWS Cloud Registration

Community Discussion

No comments yet. Be the first to start the discussion!