CCFA-200B: CrowdStrike Certified Falcon Administrator

By CrowdStrike · Question Mode

QuestionQ131

VerifiedPolicy Application

You created a new sensor update policy and two distinct dynamic host groups to test a new Falcon sensor version. One group includes all test Windows servers. The other group includes all of your Windows servers. The new policy was applied only to the test Windows servers host group.

How should the policy be configured to safely test the new Falcon sensor version?

Explanation

Test Windows servers are members of both the test-server group and the all-Windows-servers group. When multiple sensor update policies could apply, the policy with the highest precedence is effective. Therefore, the test policy must be enabled and have higher precedence than the broad Windows-server policy so only the test servers receive the new sensor version.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!