CCFA-200B: CrowdStrike Certified Falcon Administrator

By CrowdStrike · Question Mode

QuestionQ27

VerifiedPolicy Application

To test a new Falcon sensor version, you created a new sensor update policy and two distinct dynamic host groups. One group includes all test Windows servers, while the other includes all Windows servers. The new policy was applied only to the test Windows servers host group.

What is required to test the new sensor update policy safely and successfully on only the test Windows servers?

Explanation

Because the test Windows servers also match the all-Windows group, they receive both applicable sensor update policies. Enabling the test policy and giving it higher precedence causes its sensor-version configuration to override the broader policy for those test hosts, limiting the rollout to the intended group.

Community Discussion

No comments yet. Be the first to start the discussion!