CCFA Exam QuestionsBrowse all questions from this exam

CCFA Exam - Question 112


The Falcon sensor uses certificate pinning to defend against man-in-the-middle attacks. What must you ensure is disabled for the sensor to communicate with the CrowdStrike Cloud?

Show Answer
Correct Answer: B

The Falcon sensor uses certificate pinning to secure communication channels by ensuring that only trusted certificates are accepted. Deep packet inspection (DPI) can intercept and examine data packets, potentially interfering with the secure communication. Therefore, disabling DPI is necessary to ensure the sensor can communicate effectively with the CrowdStrike Cloud without disrupting the certificate pinning process.

Discussion

1 comment
Sign in to comment
001truthOption: B
Nov 7, 2023

B is right