CCFA-200B · Question #58
Which command would tell you if a Falcon Sensor was running on a Windows host?
The correct answer is C. sc.exe query csagent. The command that would tell you if a Falcon Sensor was running on a Windows host is sc.exe query csagent. This command will show the status of the csagent service, which is responsible for running the sensor on Windows systems. The output of this command will indicate if the…
Question
Which command would tell you if a Falcon Sensor was running on a Windows host?
Options
- Acswindiag.exe -status
- Bnetstat.exe -f
- Csc.exe query csagent
- Dsc.exe query falcon
How the community answered
(30 responses)- A7% (2)
- B3% (1)
- C87% (26)
- D3% (1)
Explanation
The command that would tell you if a Falcon Sensor was running on a Windows host is sc.exe query csagent. This command will show the status of the csagent service, which is responsible for running the sensor on Windows systems. The output of this command will indicate if the service is running, stopped, or paused. If the service is running, the sensor is also running.
Topics
Community Discussion
No community discussion yet for this question.