Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

CrowdStrike Exam CCFA-200 Topic 2 Question 15 Discussion

Actual exam question for CrowdStrike's CCFA-200 exam
Question #: 15
Topic #: 2
[All CCFA-200 Questions]

A Falcon Administrator is trying to use Real-Time Response to start a session with a host that has a sensor installed but they are unable to connect. What is the most likely cause?

Show Suggested Answer Hide Answer
Suggested Answer: C

Contribute your Thoughts:

Oretha
3 months ago
Maybe the Falcon Admin needs to call the IT helpdesk and ask them to 'have you tried unplugging it and plugging it back in?'
upvoted 0 times
Dorothy
2 months ago
C: They do not have an RTR role assigned to them
upvoted 0 times
...
Devorah
3 months ago
B: The domain controller is preventing the connection
upvoted 0 times
...
Moon
3 months ago
A: The host has a user logged into it
upvoted 0 times
...
...
Vilma
3 months ago
I wonder if the Falcon Administrator tried turning the host off and on again. That usually fixes everything, right?
upvoted 0 times
Dominque
2 months ago
C: They do not have an RTR role assigned to them
upvoted 0 times
...
Elvera
2 months ago
B: The domain controller is preventing the connection
upvoted 0 times
...
Dana
3 months ago
A: The host has a user logged into it
upvoted 0 times
...
...
Katina
4 months ago
D is my pick. Chances are, another analyst is already connected to the host, and that's preventing the Falcon Admin from establishing a session.
upvoted 0 times
Gianna
2 months ago
D: True, that could also be a possibility. It's important to rule out all options.
upvoted 0 times
...
Lindsey
2 months ago
C: Or maybe they should check if they have the RTR role assigned to them.
upvoted 0 times
...
Jestine
2 months ago
B: That could be the case. Maybe they need to wait for the other analyst to disconnect first.
upvoted 0 times
...
Odette
2 months ago
A: I think it might be because another analyst is already connected to the host.
upvoted 0 times
...
Viva
2 months ago
D: True, that could also be a possibility. It's important to rule out all options.
upvoted 0 times
...
Gearldine
3 months ago
C: Or maybe they should check if they have the RTR role assigned to them.
upvoted 0 times
...
Kizzy
3 months ago
B: That could be the case. Maybe they need to wait for the other analyst to disconnect first.
upvoted 0 times
...
Mauricio
3 months ago
A: I think it might be because another analyst is already connected to the host.
upvoted 0 times
...
...
Alberta
4 months ago
I'm going to go with option A. The host might have a user logged in, and that could be blocking the Real-Time Response session.
upvoted 0 times
...
Fatima
4 months ago
Option C seems the most plausible. If the admin doesn't have the RTR role assigned, they won't be able to establish the connection.
upvoted 0 times
...
Charlene
4 months ago
I think the most likely cause is that the domain controller is preventing the connection. It's a common issue with Real-Time Response.
upvoted 0 times
Denae
3 months ago
B: The domain controller is preventing the connection
upvoted 0 times
...
Yvette
3 months ago
A: The host has a user logged into it
upvoted 0 times
...
...
Leonora
4 months ago
But what if the host doesn't have an RTR role assigned to them? That could also be a possible cause, right?
upvoted 0 times
...
Basilia
4 months ago
I agree with Gaston, having a user logged in could be the reason why the Falcon Administrator is unable to connect.
upvoted 0 times
...
Gaston
4 months ago
I think the most likely cause is that the host has a user logged into it.
upvoted 0 times
...

Save Cancel