ちなみに、JPTestKing IDPの一部をクラウドストレージからダウンロードできます：https://drive.google.com/open?id=1WsgV5yei1f885YC0TAdA3IBUOLDW_0C4
この驚くほど高く受け入れられている試験に適合するには、IDP学習教材のような上位の実践教材で準備する必要があります。彼らは時間とお金の面で最良の選択です。この試験について決心している限り、その職業は疑う余地がないことを理解できます。そして、彼らの職業はIDPトレーニング準備で徹底的に表現されています。彼らはIDP試験の本当の知識をつかみ、忘れられない経験をするのに非常に役立ちます。この小さなメリットをお見逃しなく。
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
| トピック 4 |
|
| トピック 5 |
|
| トピック 6 |
|
弊社が提供したIDP問題集がほかのインターネットに比べて問題のカーバ範囲がもっと広くて対応性が強い長所があります。JPTestKingが持つべきなCrowdStrike問題集を提供するサイトでございます。
質問 # 36
Describe the difference between a Human account and a Programmatic account.
正解：A
質問 # 37
Where would a Falcon administrator enable authentication traffic inspection (ATI) for Domain Controllers?
正解：D
解説：
Authentication Traffic Inspection (ATI) is a foundational capability of Falcon Identity Protection that enables the platform to analyze authentication traffic from domain controllers. According to the CCIS documentation, ATI is enabled throughIdentity configuration policies.
Identity configuration policies define how the Falcon sensor captures and inspects authentication-related traffic, including Kerberos, NTLM, LDAP, and other identity protocols. Enabling ATI at this level ensures that domain controllers provide the necessary telemetry for identity risk analysis, detections, and behavioral profiling.
The other options are incorrect because:
* Identity management settings focus on identity governance and administration.
* Identity detection configuration controls detection logic, not traffic inspection.
* Identity protection settings manage high-level configuration but do not directly enable ATI.
Because ATI must be explicitly enabled viaIdentity configuration policies,Option Ais the correct and verified answer.
質問 # 38
Describe the difference between a Human account and a Programmatic account.
正解：A
解説：
Falcon Identity Protection differentiateshuman accountsandprogrammatic accountsbased onauthentication behavior, not naming conventions or assigned roles. According to the CCIS curriculum,human accounts are often used interactively, meaning they authenticate through direct user actions such as workstation logins, VPN access, or application access.
Programmatic accounts (such as service accounts) typically authenticatenon-interactively, often on a predictable schedule or in response to automated processes. Falcon analyzes authentication frequency, protocol usage, timing, and access patterns to classify account types automatically.
The incorrect options reflect common misconceptions:
* Human accounts are not always administrators.
* Programmatic accounts can support MFA in some architectures.
* Programmatic accounts are not used interactively.
Because interactive authentication behavior is the defining characteristic of human accounts,Option Dis the correct and verified answer.
質問 # 39
Which of the following isNOTa default insight but can be created with a custom insight?
正解：C
解説：
In Falcon Identity Protection,default insightsare prebuilt analytical views provided by CrowdStrike to immediately highlight common and high-impact identity risks across the environment. These default insights are automatically available in theRisk AnalysisandInsightsareas and are designed to surface well-known identity exposure patterns without requiring customization.
Examples ofdefault insightsincludeUsing Unmanaged Endpoints,GPO Exposed Password, and Compromised Password. These insights are natively provided because they represent frequent and high-risk identity attack vectors such as credential exposure, unmanaged authentication sources, and password compromise, all of which directly contribute to elevated identity risk scores.
Poorly Protected Accounts with SPN (Service Principal Name), however, isnot provided as a default insight. While Falcon Identity Protection does collect and analyze SPN-related risk signals-such as Kerberoasting exposure and weak service account protections-this specific grouping must be created by administrators usingcustom insight filters. Custom insights allow teams to define precise conditions, combine attributes (privilege level, SPN presence, password age, MFA status), and tailor risk visibility to their organization's threat model.
This distinction is emphasized in the CCIS curriculum, which explains thatcustom insights extend beyond default coverage, enabling deeper, organization-specific identity risk analysis. Therefore,Option Dis the correct answer.
質問 # 40
When creating an API client, which scope withWritepermissions must be enabled prior to using Identity Protection API?
正解：C
解説：
To interact with Falcon Identity Protection using GraphQL, the API client must be created with the appropriate permission scopes. According to the CCIS curriculum, theIdentity Protection GraphQLscope withWrite permissionsmust be enabled prior to using the Identity Protection API.
This scope allows the API client to execute GraphQL queries and mutations related to identity detections, incidents, users, and risk data. Even when performing read-only operations, CrowdStrike requires the GraphQL Write scope to authorize GraphQL query execution within the Falcon platform.
The other options are incorrect because:
* Identity Protection Assessment and Health are read-only data scopes.
* The statement that Write permissions are not required is explicitly false per CCIS documentation.
Because GraphQL access requires theIdentity Protection GraphQL (Write)scope,Option Dis the correct and verified answer.
質問 # 41
......
JPTestKingガイドトレントは、専門家によって編集され、経験豊富な専門家によって承認されています。言語は理解しやすいため、どの学習者にも学習上の障害はなく、IDP学習質問はどの学習者にも適しています。このソフトウェアは、さまざまな自己学習および自己評価機能を強化して、学習の結果を確認します。このソフトウェアは、学習者が脆弱なリンクを見つけて対処するのに役立ちます。 IDP試験トレントは、タイミング機能と試験を刺激する機能を向上させます。 CrowdStrike Certified Identity Specialist(CCIS) Examラーニングガイドを使用すると、IDP試験に簡単に合格できます。
IDP日本語版と英語版: https://www.jptestking.com/IDP-exam.html
P.S. JPTestKingがGoogle Driveで共有している無料かつ新しいIDPダンプ：https://drive.google.com/open?id=1WsgV5yei1f885YC0TAdA3IBUOLDW_0C4