CCFA-200B: CrowdStrike Certified Falcon Administrator

By CrowdStrike · Question Mode

QuestionQ76

VerifiedPolicy Application

You want to add another layer of security for high-risk Real Time Response (RTR) commands in your environment.

Where in the UI do you configure MFA for RTR?

Explanation

Falcon configures MFA reauthentication for high-risk Real Time Response actions through General settings. Response policies govern RTR command availability, while notification and containment policies do not control RTR MFA.

Community Discussion

No comments yet. Be the first to start the discussion!