Exam IDP Topic 5 Question 14 Discussion

Actual exam question for CrowdStrike's IDP exam
Question #: 14
Topic #: 5
Where would a Falcon administrator enable authentication traffic inspection (ATI) for Domain Controllers?

Suggested Answer: A Vote an answer

Authentication Traffic Inspection (ATI) is a foundational capability of Falcon Identity Protection that enables the platform to analyze authentication traffic from domain controllers. According to the CCIS documentation, ATI is enabled throughIdentity configuration policies.
Identity configuration policies define how the Falcon sensor captures and inspects authentication-related traffic, including Kerberos, NTLM, LDAP, and other identity protocols. Enabling ATI at this level ensures that domain controllers provide the necessary telemetry for identity risk analysis, detections, and behavioral profiling.
The other options are incorrect because:
* Identity management settings focus on identity governance and administration.
* Identity detection configuration controls detection logic, not traffic inspection.
* Identity protection settings manage high-level configuration but do not directly enable ATI.
Because ATI must be explicitly enabled viaIdentity configuration policies,Option Ais the correct and verified answer.

by Sherry at Apr 12, 2026, 03:16 AM

Limited Time Offer

15%

Off

Get Premium IDP Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10