CCFA: CrowdStrike Certified Falcon Administrator

By CrowdStrike · Question Mode

QuestionQ135

VerifiedPolicy Application

A server was added to a new host group with a different sensor update and prevention policy applied. Although the server has been online for over 30 minutes, the policies still have not been applied.

Why have the policies not been applied?

Explanation

Hosts can belong to multiple groups, and conflicting sensor update and prevention policies are resolved by group precedence. Policies from a higher-precedence group remain assigned instead of those from the newly added lower-precedence group.

Community Discussion

No comments yet. Be the first to start the discussion!