CrowdStrike Certified Falcon Administrator (CCFA) — Question 190

You are deploying the Falcon sensor to a total of 500 hosts. Hosts in an Organizational Unit (OU) will need a specific exclusion that was previously identified. This OU is expected to add members over the next quarter.

What is the best way to create a host group for this OU?

Answer options

• A. Create a dynamic group with an assignment rule that excludes the OU
• B. Create a static group with from list of all 500 host names.
• C. Create a static group with from list of host names in the OU
• D. Create a dynamic group with an assignment rule that filters for the OU

Correct answer: D

Explanation

The correct answer is D because a dynamic group can automatically include new hosts added to the OU, ensuring that the exclusions remain relevant as the OU expands. Option A is incorrect as it excludes the OU instead of including it, and options B and C are static, which do not adapt to changes in the OU's membership.