IDP専門知識訓練 & IDP試験過去問

P.S. Fast2testがGoogle Driveで共有している無料かつ新しいIDPダンプ：https://drive.google.com/open?id=18tHKDp3shpL7aaGXhuvbDhYkLmNNa6Pd

CrowdStrikeのIDP資格認定証明書を持つ人は会社のリーダーからご格別のお引き立てを賜ったり、仕事の昇進をたやすくなったりしています。これなので、今から我々社Fast2testのIDP試験に合格するのに努力していきます。弊社のCrowdStrikeのIDP真題によって、資格認定証明書を受け取れて、仕事の昇進を実現できます。

CrowdStrike IDP Exam Overview:

Certification Vendor:CrowdStrike
Exam Name:CrowdStrike Certified Identity Specialist
Exam Number:CCIS
Exam Format:Closed-book, Multiple Choice
Real Exam Qty:60
Exam Duration:90 minutes
Available Languages:English
Exam Price:USD 250
Passing Score:N/A (Scaled Scoring)
Certificate Validity Period:3 Years
Related Certifications:CrowdStrike Certified SIEM Engineer (CCSE)
CrowdStrike Certified Falcon Responder (CCFR)
CrowdStrike Certified Falcon Administrator (CCFA)
CrowdStrike Certified SIEM Analyst (CCSA)
CrowdStrike Certified Cloud Specialist (CCCS)
CrowdStrike Certified Falcon Hunter (CCFH)
Sample Questions:CrowdStrike IDP Sample Questions
Exam Way:Online via Pearson VUE or Onsite at specific events
Pre Condition:No mandatory prerequisites, but 6 months+ experience with Falcon platform and completion of recommended training is highly recommended.
Official Syllabus URL:https://www.crowdstrike.com/content/dam/crowdstrike/marketing/en-us/documents/pdfs/crowdstrike-university/cfcp-certification-guide.pdf

>> IDP専門知識訓練 <<

IDP試験過去問 & IDP日本語版受験参考書

競争がますます激しいIT業種では、CrowdStrikeのIDP試験の認定は欠くことができない認証です。最も早い時間でCrowdStrikeのIDP認定試験に合格したいなら、Fast2testのCrowdStrikeのIDP試験トレーニング資料を利用すればいいです。もしうちの学習教材を購入した後、試験に不合格になる場合は、私たちが全額返金することを保証いたします。

CrowdStrike IDP 認定試験の出題範囲：

トピック出題範囲
トピック 1
  • Risk Management with Policy Rules: Covers creating and managing policy rules and groups, triggers, conditions, enabling
  • disabling rules, applying changes, and required Falcon roles.
トピック 2
  • Configuration and Connectors: Addresses domain controller monitoring, subnet management, risk settings, MFA and IDaaS connectors, authentication traffic inspection, and country-based lists.
トピック 3
  • Domain Security Assessment: Focuses on domain risk scores, trends, matrices, severity
  • likelihood
  • consequence factors, risk prioritization, score reduction, and configuring security goals and scopes.
トピック 4
  • GraphQL API: Covers Identity API documentation, creating API keys, permission levels, pivoting from Threat Hunter to GraphQL, and building queries.
トピック 5
  • Threat Hunting and Investigation: Focuses on identity-based detections and incidents, investigation pivots, incident trees, detection evolution, filtering, managing exclusions and exceptions, and risk types.
トピック 6
  • Falcon Identity Protection Fundamentals: Introduces the four menu categories (monitor, enforce, explore, configure), subscription differences between ITD and ITP, user roles, permissions, and threat mitigation capabilities.
トピック 7
  • Identity Protection Tenets: Examines Falcon Identity Protection's architecture, domain traffic inspection, EDR complementation, human vulnerability protection, log-free detections, and identity-based attack mitigation.
トピック 8
  • Zero Trust Architecture: Covers NIST SP 800-207 framework, Zero Trust principles, Falcon's implementation, differences from traditional security models, use cases, and Zero Trust Assessment score calculation.
トピック 9
  • Multifactor Authentication (MFA) and Identity-as-a-service (IDaaS) Configuration Basics: Focuses on accessing and configuring MFA and IDaaS connectors, configuration fields, and enabling third-party MFA integration.
トピック 10
  • User Assessment: Examines user attributes, differences between users
  • endpoints
  • entities, risk baselining, risky account types, elevated privileges, watchlists, and honeytoken accounts.

CrowdStrike Certified Identity Specialist(CCIS) Exam 認定 IDP 試験問題 (Q57-Q62):

質問 # 57
Which of the following actions under the Investigate menu will pivot to Falcon Identity Protection from an identity-based detection?

正解：C

解説：
Falcon Identity Protection integrates directly withThreat Hunterto enable deeper investigation of identity- based activity. According to the CCIS curriculum, selectingSearch for involved entities in Threat Hunter allows analysts to pivot from an identity-based detection into Threat Hunter while preserving identity context.
This pivot enables analysts to examine related users, service accounts, endpoints, and authentication behavior using advanced queries and timelines. Importantly, this action maintains the identity-centric investigation flow, bridging detections with broader hunting capabilities.
The other options do not perform this specific pivot:
* Investigating users or endpoints remains within entity views.
* Searching for events in Threat Hunter does not preserve entity context.
BecauseSearch for involved entities in Threat Hunteris the correct pivot action,Option Bis the verified answer.


質問 # 58
Which of the following actions willNOThelp to decrease a domain risk score?

正解：A

解説：
Falcon Identity Protection evaluatesdomain riskby analyzing identity-related weaknesses such as insecure authentication protocols, legacy directory configurations, and exposure to credential-based attacks. Actions that harden Active Directory and authentication mechanisms will directly reduce domain risk scores.
Measures such asenabling SMB signing,enforcing NTLMv2, andupgrading unsupported operating systemsremove common identity attack paths and are explicitly recommended in the CCIS curriculum as effective domain risk remediation steps.
In contrast,upgrading end-of-life Acrobat Readeraddresses anendpoint application vulnerability, not an identity or directory-related risk. While important for endpoint hygiene, it does not influence identity telemetry, authentication behavior, or domain controller security assessed by Falcon Identity Protection.
Because domain risk scoring is strictly tied to identity infrastructure and authentication posture,Option Bdoes not contribute to lowering the domain risk score and is therefore the correct answer.


質問 # 59
Which of the following Falcon rolesCANNOTenable and disable policy rules?

正解：D

解説：
Falcon Identity Protection enforcesrole-based access control (RBAC)to ensure that only authorized users can create, modify, or manage policy rules. Policy rules directly impact identity enforcement actions, making proper role separation critical.
According to the CCIS documentation, the ability toenable and disable policy rulesis granted to theIdentity Protection Policy Managerand theFalcon Administratorroles. These roles are explicitly designed to manage enforcement logic, triggers, and automated identity controls.
TheIdentity Protection Domain Administratorrole, however, is limited todomain-level visibility and management, such as reviewing domain configurations, monitoring risks, and assessing posture. This role doesnothave permissions to modify or control policy enforcement behavior.
This separation prevents accidental or unauthorized changes to identity enforcement rules. Therefore,Option Ais the correct and verified answer.


質問 # 60
Which of the following demonstrates a detection is enabled?

正解：B

解説：
In Falcon Identity Protection, detection status is visually indicated using atoggle controlwithin the detection configuration interface. According to the CCIS documentation, when a detection isenabled, the toggle next to Detection Enabledis displayed ingreen.
A green toggle indicates that the detection logic is active and that Falcon will generate detections when the defined conditions are met. When the toggle is gray, the detection is disabled and will not generate alerts or contribute to incident formation.
Falcon does not rely on textual "Enabled" or "Disabled" tags to indicate detection status. Instead, the toggle color provides a clear, immediate visual indicator to administrators.
Because agreen toggleexplicitly represents an enabled detection,Option Bis the correct and verified answer.


質問 # 61
Within which Identity Protection menu would an administrator enableAuthentication Traffic Inspection (ATI)for a domain?

正解：B

解説：
Authentication Traffic Inspection (ATI) is enabled throughIdentity Configuration Policies, which define how the Falcon sensor captures and inspects identity-related network traffic. According to the CCIS documentation, ATI configuration is performed underConfigure > Identity Configuration Policies.
These policies allow administrators to specify which authentication protocols are inspected, which domain controllers are covered, and how identity telemetry is collected. This configuration step is mandatory to enable identity visibility and detection capabilities.
The Enforce menu is used for policy rules and automated actions, not traffic inspection. General settings do not control sensor inspection behavior. Because ATI directly affects sensor data capture, it is managed exclusively through Identity Configuration Policies.
Therefore,Option Dis the correct and verified answer.


質問 # 62
......

IDP試験過去問: https://jp.fast2test.com/IDP-premium-file.html

2026年Fast2testの最新IDP PDFダンプおよびIDP試験エンジンの無料共有：https://drive.google.com/open?id=18tHKDp3shpL7aaGXhuvbDhYkLmNNa6Pd