CCFA: CrowdStrike Certified Falcon Administrator

By CrowdStrike · Question Mode

QuestionQ17

VerifiedHost Management and Setup

Although you are a Falcon Administrator, you find that you cannot use the "Connect to Host" feature to collect additional information available only on the host. Which role must be added to your user account to gain this capability?

Explanation

Falcon Real Time Response (RTR) provides remote host connections for collecting host-level information. CrowdStrike’s RTR policy documentation specifies that real-time response allows users with Real Time Responder roles to remotely connect to hosts.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!