nerdexam
CrowdStrike

CCFA-200B · Question #222

After successfully installing Falcon on a new employee's laptop, you notice that the machine is assigned the default prevention policy instead of the custom prevention policy you created. You verify…

The correct answer is B. The laptop is not a member of a host group assigned to the custom policy. You've hit your limit · resets 12:50am (America/New_York)

Policy Management

Question

After successfully installing Falcon on a new employee's laptop, you notice that the machine is assigned the default prevention policy instead of the custom prevention policy you created. You verify that the Falcon sensor is functioning properly, and you confirm that the custom policy is enabled and successfully running on more than 1,000 other Falcon hosts. What is the likely cause of this issue?

Options

  • AFalcon requires a 24- hour waiting period to apply custom policies to newly installed hosts
  • BThe laptop is not a member of a host group assigned to the custom policy
  • CA host-based firewall rule is preventing the custom policy from applying successfully
  • DA prompt to apply the new prevention policy was manually declined

How the community answered

(36 responses)
  • A
    8% (3)
  • B
    72% (26)
  • C
    3% (1)
  • D
    17% (6)

Explanation

You've hit your limit · resets 12:50am (America/New_York)

Topics

#prevention policy#host groups#policy assignment#sensor deployment

Community Discussion

No community discussion yet for this question.

Full CCFA-200B Practice