CrowdStrike Certified Falcon Administrator (CCFA) — Question 200

A server was added to a new host group that has a different sensor update and prevention policy applied. Even though the server has been online for more than 30 minutes, the policies have still not been applied.

Why have the policies not applied?

Answer options

• A. Any changes to groups requires a host reboot for policy changes to take effect
• B. The new group should be prioritized by reordering groups and placing the new group in PRECEDENCE 1
• C. The new group has not been enabled and the host is currently applying default policies
• D. Hosts can reside in multiple groups and the server is currently assigned policies with higher precedences

Correct answer: D

Explanation

The correct answer is D because hosts can be part of several groups, and if there are policies with higher precedence assigned to the server, those will take effect over the new group's policies. Options A, B, and C are incorrect because a reboot is not always necessary, reordering groups does not change existing policy precedence, and the new group might not be relevant if higher precedence policies are already in place.