CCFA: CrowdStrike Certified Falcon Administrator

By CrowdStrike · Question Mode

QuestionQ125

VerifiedHost Management and Setup

A Falcon Administrator is attempting to use Real-Time Response to initiate a session with a host that has a sensor installed, but cannot connect. What is the most likely cause?

Explanation

Opening a Real-Time Response session requires the administrator to be assigned a role that includes Real-Time Response permissions. Sensor installation by itself does not authorize RTR access.

Community Discussion

No comments yet. Be the first to start the discussion!