Exam CCFA All QuestionsBrowse all questions from this exam
Question 5

Even though you are a Falcon Administrator, you discover you are unable to use the "Connect to Host" feature to gather additional information which is only available on the host. Which role do you need added to your user account to have this capability?

    Correct Answer: A

    To use the 'Connect to Host' feature and gather additional information directly from the host in Falcon, the user needs the 'Real Time Responder' role. This role specifically grants the necessary permissions for real-time response actions, including connecting to a host for further investigation.

Discussion
FerbOPOption: A

You must have RTR role to connect to a host.The Falcon Administrator role does not include access to real time response.

sbag0024Option: A

A is correct, You need RTR not just FA.

chaos_mobOption: A

A is correct

andreiushuOption: A

A is correct answer

Roy_SoOption: A

A is the correct answer x 2

AlexPugaOption: A

A is correct answer

ShuliAbbaOption: A

The correct answer is A - Real-Time responder.

plantvastOption: A

Only the Real Time Responder roles can allow you to use the Connect to Host option (RTR) in Host Management.