CCFA-200b practice question 18 of 25

Which of the following is NOT an available action for an API Client?

Full set: 153 questions

Domain Falcon Platform

Answer options
A: Edit an API Client
B: Reset an API Client Secret
C: Retrieve an API Client Secret Correct answer
D: Delete an API Client
Correct Answer:
C. Retrieve an API Client Secret
Explanation

For security purposes, the CrowdStrike Falcon API Client Secret is only displayed once, immediately upon its creation. After this initial display, it cannot be viewed or retrieved again from the Falcon console. If the secret is lost, compromised, or forgotten, the only available action is to reset it, which invalidates the old secret and generates a new one. This design prevents the exposure of sensitive credentials that are already in use.

Why Incorrect

A. Edit an API Client: This is incorrect. You can edit an API Client's details, such as its name, description, and assigned API scopes (permissions), after it has been created.
B. Reset an API Client Secret: This is incorrect. Resetting the secret is a fundamental security feature that allows you to generate a new secret if the original is lost or compromised.
D. Delete an API Client: This is incorrect. Deleting an API Client is a standard administrative action to permanently revoke its access when it is no longer needed.

References

1. CrowdStrike Falcon Documentation, API Clients and Keys. In the section "Create an API client," the documentation explicitly states: "For security reasons, the client secret is only shown once. Copy the client secret and store it in a safe place. If you lose the client secret, you must reset it to generate a new one." This confirms that retrieving the secret is not possible.

2. CrowdStrike Falcon Documentation, API Clients and Keys. The documentation provides distinct procedures for "Edit an API client," "Reset a client secret," and "Delete an API client," confirming these are all available actions.

Scroll to Top