CrowdStrike Certified Security Engineer (CCSE) — Question 4

What is the correct mode to enroll LogCollector into Fleet Management with configuration of the log sources stored and managed centrally in Next-Gen SIEM?

Answer options

• A. Full
• B. Complete
• C. Central
• D. localConfig

Correct answer: C

Explanation

The correct answer is 'Central' because it allows LogCollector to be enrolled in a manner that leverages centralized management of log sources in Next-Gen SIEM. The other options, such as 'Full,' 'Complete,' and 'localConfig,' do not provide the necessary central management capabilities needed for this scenario.