CCFA Exam QuestionsBrowse all questions from this exam

CCFA Exam - Question 5


Even though you are a Falcon Administrator, you discover you are unable to use the "Connect to Host" feature to gather additional information which is only available on the host. Which role do you need added to your user account to have this capability?

Show Answer
Correct Answer: A

To use the 'Connect to Host' feature and gather additional information directly from the host in Falcon, the user needs the 'Real Time Responder' role. This role specifically grants the necessary permissions for real-time response actions, including connecting to a host for further investigation.

Discussion

8 comments
Sign in to comment
FerbOPOption: A
Apr 25, 2023

You must have RTR role to connect to a host.The Falcon Administrator role does not include access to real time response.

plantvastOption: A
Jan 20, 2023

Only the Real Time Responder roles can allow you to use the Connect to Host option (RTR) in Host Management.

ShuliAbbaOption: A
Jan 24, 2023

The correct answer is A - Real-Time responder.

AlexPugaOption: A
Jan 31, 2023

A is correct answer

Roy_SoOption: A
Feb 6, 2023

A is the correct answer x 2

andreiushuOption: A
Feb 20, 2023

A is correct answer

chaos_mobOption: A
Apr 4, 2023

A is correct

sbag0024Option: A
Jun 14, 2023

A is correct, You need RTR not just FA.