CrowdStrike Certified Falcon Administrator (CCFA) — Question 122

Which option best describes the general process for a manual installation of the Falcon Sensor on MacOS?

Answer options

• A. Grant the Falcon package Full Disk Access, install the Falcon package, load the Falcon Sensor with the command 'falconctl stats'
• B. Install the Falcon package passing it the installation token in the command line
• C. Install the Falcon package, use falconctl to license the sensor, approve the system extension, grant the sensor Full Disk Access
• D. Grant the Falcon package Full Disk Access, install the Falcon package, use falconctl to license the sensor

Correct answer: C

Explanation

Option C is correct because it encompasses all necessary steps: installing the Falcon package, licensing it using falconctl, approving the system extension, and granting Full Disk Access. Option A misses the licensing step, Option B does not include all required actions, and Option D neglects the system extension approval, making them incomplete for a successful installation.