CrowdStrike Certified Falcon Administrator (CCFA) — Question 49

When a host belongs to more than one host group, how is sensor update precedence determined?

Answer options

• A. Groups have no impact on sensor update policies
• B. Sensors of hosts that belong to more than one group must be manually updated
• C. The highest precedence policy from the most important group is applied to the host
• D. All of the host's groups are examined in aggregate and the policy with highest precedence is applied to the host

Correct answer: D

Explanation

The correct answer is D because it correctly states that the policies from all of the host's groups are evaluated together to determine which one holds the highest precedence. Option A is incorrect as groups do influence sensor updates, while option B is wrong since manual updates are not required. Option C is misleading as it only considers one group instead of all applicable groups.