CCFA: CrowdStrike Certified Falcon Administrator

By CrowdStrike · Question Mode

QuestionQ66

VerifiedSensor Deployment

The Falcon sensor uses certificate pinning to protect against man-in-the-middle attacks. Which statement is TRUE about Falcon sensor certificate validation?

Explanation

Certificate pinning verifies that the TLS certificate presented for the CrowdStrike cloud connection is the expected one. Deep packet inspection, SSL inspection, and HTTPS/TLS interception can substitute or alter that certificate, so they can prevent validation and disrupt sensor connectivity.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!