Which of the following steps are required to delete a sensor update policy?

Question

Options

• ARemove the policy from all assigned host groups, disable the policy, then click Delete from the
• BFrom the policy's settings, disable all toggles first, then click Delete
• CRemove the policy from all assigned host groups, then click Delete from the policy's settings
• DFrom the policy's settings, disable the policy, then click Delete

• A
  91% (20)
• C
  5% (1)
• D
  5% (1)

Explanation

Option A is correct because deleting a sensor update policy in CrowdStrike Falcon requires three ordered steps: first unassigning the policy from all host groups (you cannot delete a policy that is actively assigned), then disabling the policy, and finally clicking Delete from the policy's action menu.

Why the distractors fail:

• B is wrong because disabling individual toggles within the policy is not the same as disabling the policy itself, and it skips the critical step of removing host group assignments.
• C is wrong because it omits the required disabling step - the platform enforces that a policy must be disabled before deletion, not just unassigned.
• D is wrong because it skips removing host group assignments entirely; an assigned policy cannot be deleted regardless of its enabled/disabled state.

Memory tip: Think of it as a checklist with three gates before teardown - "Unassign → Disable → Delete". The platform blocks you at each gate if you skip the previous step, so the order is enforced, not optional.

No community discussion yet for this question.