CCFA: CrowdStrike Certified Falcon Administrator

By CrowdStrike · Question Mode

QuestionQ88

VerifiedPolicy Application

A member of your SECOPS team has the Falcon Security Lead role, allowing them to manage detections, quarantine files, and reset user credentials. Which additional role is needed to let them also view and modify remediation actions?

Explanation

The Remediation Manager role grants access to view and modify remediation actions. Falcon Security Lead permissions for detections, file quarantine, and credential resets do not by themselves provide remediation-action management.

Community Discussion

No comments yet. Be the first to start the discussion!