CCSE: CrowdStrike Certified SIEM EngineerDemo

By CrowdStrike · Question Mode

QuestionQ33

Data Ingestion and Connectors

A Falcon Log Collector instance on a Linux system is not connected to Fleet Management. What command would you use to enroll the Falcon Log Collector?

  • A "C:\Program Files (x86)\CrowdStrike\Humio Log Collector\humio-log-collector.exe" enroll <TOKEN>
  • B sudo logscale-collector enroll <TOKEN>
  • C sudo humio-log-collector enroll <TOKEN>
  • D sudo humio-log-collector --token <TOKEN> enroll
Explanation

Linux custom or legacy Falcon Log Collector installations use the humio-log-collector executable. Fleet Management enrollment uses its enroll subcommand with the enrollment token as the argument, executed with sudo.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!