CCFA-200B · Question #92
The Falcon Administrator has created a new prevention policy to apply to the "Servers" group; however, when applying the new prevention policy this group is not appearing in the list of available grou
The correct answer is B. The "Servers" group already has a policy applied to it. The most likely issue for not being able to apply a new prevention policy to the "Servers" group is that the "Servers" group already has a policy applied to it. A prevention policy is a policy that defines the prevention capabilities and settings for the Falcon sensor on a host.
Question
The Falcon Administrator has created a new prevention policy to apply to the "Servers" group; however, when applying the new prevention policy this group is not appearing in the list of available groups. What is the most likely issue?
Options
- AThe new prevention policy should be enabled first
- BThe "Servers" group already has a policy applied to it
- CThe "Servers" group must be disabled first
- DHost type was not defined correctly within the prevention policy
How the community answered
(27 responses)- A4% (1)
- B78% (21)
- C15% (4)
- D4% (1)
Explanation
The most likely issue for not being able to apply a new prevention policy to the "Servers" group is that the "Servers" group already has a policy applied to it. A prevention policy is a policy that defines the prevention capabilities and settings for the Falcon sensor on a host. You can create and assign custom prevention policies to different hosts or groups in your environment. However, you can only assign one prevention policy per host or group at a time. If a host or group already has a prevention policy applied to it, you cannot apply another prevention policy to it unless you remove or replace the existing one.
Topics
Community Discussion
No community discussion yet for this question.