CCFA-200B: CrowdStrike Certified Falcon Administrator

By CrowdStrike · Question Mode

QuestionQ23

VerifiedHost Management and Setup

A Falcon Administrator cannot initiate a Real-Time Response (RTR) session.

What is the most likely reason?

Explanation

Initiating a Real-Time Response session requires an assigned RTR role that grants the necessary RTR permissions. Without that role, the administrator is not authorized to start the session.

Community Discussion

No comments yet. Be the first to start the discussion!