CrowdStrike Certified Falcon Administrator (CCFA)
Issued by
CrowdStrike
The CrowdStrike Certified Falcon Administrator (CCFA) exam evaluates an administrator's knowledge, skills, and abilities to to manage the CrowdStrike Falcon® platform, deploy and manage sensors, configure deployment and prevention policies, configure allowlists, blocklists, and exclusions, and conduct administrative reporting. The CCFA Exam Guide provides a detailed listing of objectives and highlights key skills tested with this exam.
- Type Certification
- Level Advanced
- Time Years
- Cost Paid
Skills
- API Clients and Keys
- Containment Policies
- Custom IOA Rules
- Development Environment
- Exclusions
- Group Creation
- Host Management
- IOC Management
- Notification Workflows
- Prevention Policies
- Quarantine Files
- Real Time Response
- Reports
- Security Administration
- Security Policies
- Sensor Deployment
- Sensor Update Policies
- User Management