You are evaluating the asset inventory in a hybrid cloud environment monitored by CrowdStrike Falcon. An unregistered virtual machine (VM) in the cloud inventory is running outdated software with…

Question

Options

• ADeploy the Falcon sensor, restrict network access, and update the software on the VM.
• BAssign the VM to a restricted group in the CrowdStrike platform.
• CIgnore the VM until a breach is confirmed to avoid unnecessary disruptions.
• DTerminate the VM immediately to prevent exploitation.

• A
  61% (38)
• B
  5% (3)
• C
  11% (7)
• D
  23% (14)

Explanation

Option A: Deploying the Falcon sensor ensures the VM is brought under management and monitoring. Restricting network access limits exposure while updating the software addresses known vulnerabilities. This approach effectively mitigates risk without unnecessarily disrupting Option B: While assigning the VM to a restricted group might help limit its access, it does not address the root cause of its vulnerabilities or the associated risks. Further actions, such as deploying the Falcon sensor and updating the software, are required. Option C: Ignoring the VM leaves it vulnerable to exploitation, increasing the risk of a breach. Proactive steps are necessary to mitigate potential threats before they escalate. Option D: Immediate termination could disrupt legitimate operations if the VM serves a business purpose. A more measured approach involves securing and updating the asset.

No community discussion yet for this question.