CrowdStrike Certified Falcon Administrator (CCFA) — Question 111
Assume the Falcon Sensor was installed on a Virtual Machine template using the installation parameter NO_START=1. Afterward, the Virtual Machine template is rebooted. What is the effect on the Falcon Sensor after reboot?
Answer options
- A. The Falcon Sensor would start, but only send a heartbeat to the Falcon console
- B. The Falcon Sensor would not automatically start on reboot. It would have to be manually started
- C. The Falcon Sensor would disable BIOS checks at startup
- D. The Falcon Sensor would start at reboot and generate an Agent ID
Correct answer: D
Explanation
The correct answer is D because when the Falcon Sensor is installed with NO_START=1, it is set not to start automatically, but upon reboot, it will start and generate an Agent ID. Option A is incorrect because it implies that the sensor starts but only sends a heartbeat, which is not the case. Option B is wrong because it suggests the sensor does not start at all, and option C is irrelevant as it discusses BIOS checks, which are not affected by the Falcon Sensor's startup parameters.