nerdexam
CrowdStrike

CCFA-200B · Question #97

When a host belongs to more than one host group, how is sensor update precedence determined?

The correct answer is D. All of the host's groups are examined in aggregate and the policy with highest precedence is. The option that describes how sensor update precedence is determined when a host belongs to more than one host group is that all of the host's groups are examined in aggregate and the policy with highest precedence is applied to the host. A Sensor Update policy is a policy that c

Sensor Deployment and Management

Question

When a host belongs to more than one host group, how is sensor update precedence determined?

Options

  • AGroups have no impact on sensor update policies
  • BSensors of hosts that belong to more than one group must be manually updated
  • CThe highest precedence policy from the most important group is applied to the host
  • DAll of the host's groups are examined in aggregate and the policy with highest precedence is

How the community answered

(44 responses)
  • A
    5% (2)
  • B
    5% (2)
  • C
    14% (6)
  • D
    77% (34)

Explanation

The option that describes how sensor update precedence is determined when a host belongs to more than one host group is that all of the host's groups are examined in aggregate and the policy with highest precedence is applied to the host. A Sensor Update policy is a policy that controls how and when the Falcon sensor is updated on a host. You can create and assign custom Sensor Update policies to different hosts or groups in your environment. Each Sensor Update policy has a precedence value, which determines its priority over other policies. The higher the precedence value, the higher the priority. If a host belongs to more than one host group, each with a different Sensor Update policy assigned, then all of the host's groups are examined in aggregate and the policy with highest precedence among them is applied to the

Topics

#Sensor Update Policy#policy precedence#host group#multi-group membership

Community Discussion

No community discussion yet for this question.

Full CCFA-200B Practice