CCFA: CrowdStrike Certified Falcon Administrator

By CrowdStrike · Question Mode

QuestionQ46

VerifiedHost Management and Setup

Which installation parameter should be used on VMs intended to serve as persistent clones in order to avoid duplicate Agent IDs?

Explanation

NO_START=1 prevents the Falcon sensor from starting immediately after installation on the clone template. On a subsequent boot, each cloned VM starts the sensor and is assigned its own Agent ID, avoiding duplicated identities.

Community Discussion

No comments yet. Be the first to start the discussion!