CrowdStrike Certified Identity Specialist(CCIS) - IDP Exam Practice Test

A. Ingesting logs

B. The need for string-based queries

C. Machine-learning-powered detection rules

D. API-based connectors

A. Tenant Domain, Application ID, Application Secret

B. Tenant Domain, Token, Configuration File

C. Tenant Domain, Application ID, Scope

D. Tenant Domain, Client Secret, User Identifier

A. Events related to an incident that occur after the incident is marked In Progress will create a new incident

B. A detection can become an element of an incident that preceded it in time

C. An event can become an element of a detection that preceded it in time

D. Not all events are security events that become elements of detections

A. Enabling SMB Signing within Active Directory

B. Enforcing NTLMv2 responses

C. Upgrading endpoints running end-of-life Acrobat Reader

D. Upgrading endpoints running end-of-life operating systems

A. Adding an exclusion for a detection creates a security hole, therefore a detection cannot be excluded

B. All detections can be disabled, some detections support excluding entities

C. Only detections can be disabled using the Identity-Based Detection # Detection Exclusion page

D. Only specific entities can be excluded by using the Identity-Based Detection # Detection Exclusion page

A. A user linked detections to the incident in the console

B. An exclusion added to the incident

C. Detections related to the incident

D. A user changed the incident type in the console