CCFA-200B: CrowdStrike Certified Falcon AdministratorDemo

By CrowdStrike · Question Mode

QuestionQ23

Host Management and Setup

A Falcon Administrator cannot initiate a Real-Time Response (RTR) session.

What is the most likely reason?

  • A The domain controller is preventing the connection
  • B The host has a user logged into it
  • C There is another analyst connected into it
  • D They do not have an RTR role assigned to them
Explanation

Initiating a Real-Time Response session requires an assigned RTR role that grants the necessary RTR permissions. Without that role, the administrator is not authorized to start the session.

Community Discussion

No comments yet. Be the first to start the discussion!