CrowdStrike CCFA-200b Exam - Topic 8 Question 6 Discussion

Actual exam question for CrowdStrike's CCFA-200b exam

Question #: 6
Topic #: 8

How can a Falcon Administrator configure a pop-up message to be displayed on a host when the Falcon sensor blocks, kills or quarantines an activity?

ABy ensuring each user has set the 'pop-ups allowed' in their User Profile configuration page

BBy enabling 'Upload quarantined files' in the General Settings configuration page

CBy turning on the 'Notify End Users' setting at the top of the Prevention policy details configuration page

DBy selecting 'Enable pop-up messages' from the User configuration page

Show Suggested Answer

Suggested Answer: C

A Falcon Administrator can configure a pop-up message to be displayed on a host when the Falcon sensor blocks, kills or quarantines an activity by turning on the ''Notify End Users'' setting at the top of the Prevention policy details configuration page. This setting allows users to enable or disable end user notifications for prevention actions taken by Falcon on Windows hosts. The other options are either incorrect or not related to configuring pop-up messages. Reference:CrowdStrike Falcon User Guide, page 36.

by Donette at Mar 08, 2026, 09:40 AM

Limited Time Offer

25%

1 month ago

I think the answer might be C, but I'm not entirely sure if that's the only setting we need to adjust.

upvoted 0 times

...