CrowdStrike Certified Falcon Administrator (CCFA) — Question 127

What will happen to a host that is not part of any group which has a prevention policy assigned to it?

Answer options

• A. The host will apply the default prevention policy
• B. The host will apply a sensor-based policy to prevent a majority of known threats
• C. The host will send a notification to the Falcon Administrator to assign a prevention policy
• D. The host will disable the falcon sensor

Correct answer: A

Explanation

Since the host is not part of any group with a prevention policy, it defaults to the system's default prevention policy. Options B, C, and D are incorrect because there is no sensor-based policy applied, no notification is sent to the administrator, and the falcon sensor is not disabled in this scenario.