During a routine audit, you discover that multiple endpoints in your CrowdStrike Falcon inventory are missing critical metadata, such as hostname and operating system details. What is the most…

Question

Options

• ADeploy the Falcon sensor on the affected endpoints to collect detailed telemetry.
• BRemove the endpoints from the inventory to prevent confusion.
• CIgnore the issue, as the devices will update themselves automatically over time.
• DReassign the endpoints to a different group within the platform.

• A
  94% (15)
• B
  6% (1)

Explanation

Option A: The Falcon sensor provides detailed telemetry, including metadata such as hostname, operating system, and other critical details. Deploying the sensor ensures the inventory is accurate and up-to-date, enabling effective monitoring and management. Option B: Removing endpoints creates blind spots in the inventory and security monitoring. Properly identifying and managing them is critical for maintaining security posture. Option C: Relying on automatic updates without addressing the root cause may leave critical gaps in asset visibility and management. Proactive action is necessary. Option D: Reassigning the endpoints does not resolve the underlying issue of missing metadata. The problem requires deploying the sensor to collect accurate data.

No community discussion yet for this question.