You are a CrowdStrike administrator and need to manage API keys for third-party integrations. Which of the following is the correct process to create…

The correct and most secure method to create API credentials for a third-party application within the CrowdStrike Falcon platform is by creating a dedicated API client. The "API Clients and Keys" section in the Falcon console is specifically designed for this purpose. This process allows an administrator to define a new client, and critically, assign granular permissions by selecting only the necessary API scopes (e.g., read-only access to detections). This adheres to the principle of least privilege, ensuring the application has only the access it requires to function, minimizing potential security risks.

A. API keys are for platform-level access and are not generated from the context of an individual host. Host management is for endpoint-specific actions.

B. Tying an application's API key to a user account is poor security practice; the application would inherit the user's permissions, and the key would be invalidated if the user account is disabled.

C. The Sensor Downloads section is for obtaining the Falcon agent installer. API keys for platform integration are managed separately and are not linked to sensor packages.

1. CrowdStrike

Inc. (2023). Getting Started with the CrowdStrike API. CrowdStrike Falcon Documentation. In the Falcon console

the documented path is Support and resources > API Clients and Keys. The guide states

"To get started with the Falcon API

you'll need to create an API client... When you create an API client

you'll select scopes to grant it access to specific Falcon APIs." This document explicitly details the process of creating a client and assigning scopes for permissions.

2. CrowdStrike

Inc. (2023). OAuth2-Based APIs. CrowdStrike Falcon Documentation

API Reference. This documentation specifies that access to the API is managed via OAuth2 clients

which are created and configured in the "API Clients and Keys" section of the Falcon UI. It details how the assigned scopes for a client ID dictate which API resources it can access.

3. Bishop

M. (2005). Introduction to Computer Security. Addison-Wesley Professional. Chapter 1

"Basic Security Concepts

" discusses the Principle of Least Privilege. The process described in option D is a direct implementation of this fundamental security principle

where a subject (the API client) is granted only the minimum permissions necessary to perform its task. This is a core concept tested in security certifications. (ISBN: 978-0321247445

Section 1.3.3).