As a security analyst, you are tasked with assessing the asset inventory in the CrowdStrike Falcon platform. You notice several unmanaged assets appearing in the inventory, identified only by IP…

Question

Options

• ATag the assets as "unmanaged" and move on to the next task.
• BIgnore these assets, as they are likely non-critical devices.
• CBlock these IP addresses at the firewall to mitigate any potential threats.
• DActivate Falcon sensor deployment to ensure visibility and management.

• A
  3% (1)
• B
  6% (2)
• C
  13% (4)
• D
  77% (24)

Explanation

Option A: Simply tagging the devices without further action does not address the potential security risks associated with unmanaged assets. Additional steps, such as identifying and deploying the Falcon sensor, are required. Option B: Unmanaged devices pose significant security risks, regardless of their perceived criticality. Ignoring them could lead to blind spots in your security posture. Option C: Blocking these devices at the firewall could disrupt legitimate operations, particularly if they are critical to business processes. Investigating and managing them is a better approach. Option D: Deploying the Falcon sensor is the most appropriate action to ensure these unmanaged assets are properly monitored and secured. Without the Falcon sensor, these devices remain unprotected and could serve as attack vectors. This step ensures they are brought under management and included in the asset inventory for continuous monitoring.

No community discussion yet for this question.