CrowdStrike Certified Falcon Administrator (CCFA) — Question 150

The Falcon Administrator has created a new prevention policy to apply to the "Servers" group; however, when applying the new prevention policy this group is not appearing in the list of available groups. What is the most likely issue?

Answer options

• A. The "Servers" group already has a policy applied to it
• B. The "Servers" group must be disabled first
• C. The new prevention policy should be enabled first
• D. Host type was not defined correctly within the prevention policy

Correct answer: A

Explanation

The correct answer is A because a group cannot have multiple policies applied simultaneously, so if the 'Servers' group already has a policy, it won't appear in the list. The other options are not valid because disabling the group or enabling the policy does not affect its visibility in the list, and the host type definition is unrelated to the issue of group visibility.