Free CrowdStrike CCCS-203b Actual Exam Questions - Question 10 Discussion
designed to identify and address?
C for sure, risky permissions on multiple identities is classic CIEM territory.
C imo, it’s about risky permissions on identities, which fits CIEM’s main use.
This one definitely looks like it’s about risky permissions tied to identities, which fits CIEM’s focus. Option C stands out since it’s about an IAM role with powerful delete rights assigned to multiple non-human identities, which is a classic risk CIEM would flag. Options A and B are more about network or function config, not identity permissions per se. D sounds safe with authorized access and encryption, so no red flags there. So yeah, C is the scenario where CIEM really steps in to spot and manage those risky permissions.
This one feels like it’s about permissions management, so C makes sense since it’s about an IAM role with broad delete permissions on multiple identities, which CIEM would flag. Also, A and B are more about config or limits, not identity or permission risk. D sounds safe since it’s encrypted and accessed properly. So C stands out as the real risk here.
Option C looks right to me because CIEM focuses on identifying overly broad permissions like deleting all resources, especially when assigned to multiple identities, which is definitely a big risk.
C/D? While C makes sense since CIEM looks for risky permission assignments, D could be tricky if the authorized app has more access than it should. But the question points to identity and permission risk, so C still feels more on target. A and B are more about network and function limits, which don’t seem related to identity permission risks.
C. This fits CIEM’s focus on risky identity permissions, especially when powerful roles like deleting resources go to multiple non-human identities. The other options are unrelated to identity risk.
Option C makes the most sense since CrowdStrike Identity Analyzer focuses on identity and permissions risks, not network settings or encryption status. Too many powerful roles assigned widely is a classic CIEM concern.
C looks like the security risk here—too many non-human identities with delete permissions is a big no-no.