CrowdStrike's 2024 versions of its highly regarded Falcon certification exams are available below:
CCFA-200b: CrowdStrike Certified Falcon Administrator
CCFR-201b: CrowdStrike Certified Falcon Responder
These new exams are designed for cybersecurity professionals who work with the Falcon platform - whether you're deploying and managing it or responding to incidents in real time.
CCFA-200b – Falcon Administrator
If you're responsible for managing the administrative side of the Falcon platform, the CCFA-200b is for you. This certification is ideal for system admins and security analysts who configure, monitor, and maintain Falcon in enterprise environments.
What It Covers
●User Management: Assign roles and manage access
●Sensor Deployment: Install and configure Falcon agents
●Host Management & Setup: Organize endpoints and track their status
●Group Creation & Policy Application: Apply security policies efficiently
●Rule Configuration: Automate actions and enforce controls
●Dashboards, Reports & Workflows: Build dashboards, generate reports, and automate processes
Key takeaway: CCFA-200b certifies your ability to reduce risk and streamline Falcon operations.
CCFR-201b – Falcon Responder
Designed for front-line analysts and incident responders, the CCFR-201b focuses on detection analysis and real-time threat response. This is a must-have if you're working in a SOC or performing hands-on threat hunting with the Falcon platform.
What It Covers
MITRE ATT&CK Framework Application: Understand and map detections to attacker tactics
●Detection Analysis & Event Investigation: Interpret Falcon alerts and investigate endpoints
●Search Tools: Use advanced search functions to trace suspicious activity
●Falcon Real Time Response (RTR): Run scripts and commands on endpoints remotely to contain threats fast
Key takeaway: CCFR-201b proves your ability to investigate and respond to incidents using CrowdStrike tools.
Why These Certifications Matter
Updated for 2024: Reflects the latest features and best practices within the Falcon platform
Boosts Your Resume: Recognized by employers looking for skilled security professionals
Real-World Skills: Focused on what you’ll actually do in the platform—no fluff
Whether you're an admin securing endpoints or an analyst fighting threats on the front lines, these certs help you stand out in a growing cybersecurity job market.
The release of CCFA-200b and CCFR-201b marks a step forward for professionals seeking to validate their CrowdStrike Falcon expertise in 2024. If you work with Falcon, or want to, these are two certs worth adding to your roadmap.