| Topic | Details |
| Topic 1 | - Remediating and Reporting Issues: This domain addresses identifying remediation steps for findings, using scheduled reports for cloud security, and utilizing Falcon Fusion SOAR workflows for automated notifications.
|
| Topic 2 | - Pre-Runtime Protection: This domain covers managing registry connections, selecting image assessment methods, and analyzing assessment reports to identify malware, CVEs, leaked secrets, Dockerfile misconfigurations, and vulnerabilities before deployment.
|
| Topic 3 | - Runtime Protection: This domain focuses on selecting appropriate Falcon sensors for Kubernetes environments, troubleshooting deployments, and identifying misconfigurations, unassessed images, IOAs, rogue containers, drift, and network connections.
|
| Topic 4 | - Findings and Detection Analysis: This domain covers evaluating security controls to identify IOMs, vulnerabilities, suspicious activity, and persistence mechanisms, auditing user permissions, comparing configurations to benchmarks, and discovering unmanaged public-facing assets.
|
| Topic 5 | - Falcon Cloud Security Features and Services: This domain covers understanding CrowdStrike's cloud security products (CSPM, CWP, ASPM, DSPM, IaC security) and their integration, plus one-click sensor deployment and Kubernetes admission controller capabilities.
|