4.2 Apply Best Practices When Managing Host Groups CCFA Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which type of host group membership rule automatically assigns hosts based on criteria such as hostname or operating system?

   • AStatic membership rule
   • BDynamic membership rule
   • CInherited membership rule
   • DManual assignment rule
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the primary purpose of establishing a host group naming convention in CrowdStrike Falcon?

   • ATo provide clarity and manageability when identifying and managing groups
   • BTo enforce security policies on hosts within the group
   • CTo ensure that host groups are sorted alphabetically in the console
   • DTo automatically assign hosts to the group based on their attributes
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A large organization has multiple Falcon administrators. The security operations team should be able to view host group membership and policy assignments, but only the senior security engineers should be able to create or modify host groups. What should the administrator configure to enforce this?

   • AGrant the security operations team the 'Manage Host Groups' permission and the senior engineers the 'View Host Groups' permission.
   • BUse the default 'Falcon Administrator' role for everyone and rely on training to prevent unauthorized changes.
   • CCreate custom roles with specific permissions: 'View Host Groups' for the security operations team and 'Manage Host Groups' for the senior engineers.
   • DAssign the 'Falcon Administrator' role to the security operations team and the 'Falcon Reader' role to the senior engineers.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which action is part of the host group lifecycle management best practices in CrowdStrike Falcon?

   • ARegularly reviewing and cleaning up unused host groups
   • BCreating a new host group for every policy change
   • CAvoiding the use of dynamic groups to reduce complexity
   • DDeleting host groups as soon as they are created
   Reveal Solution Discussion Select an answer first
6. 5expert · medium

   An administrator has a dynamic host group that includes all servers with 'web' in the hostname. The administrator now needs to exclude a specific server 'web-01' from this group because it is being decommissioned. What is the best way to achieve this?

   • AChange the hostname of 'web-01' to something that does not contain 'web'.
   • BCreate a static group for 'web-01' and move it there.
   • CManually remove 'web-01' from the group after it is added.
   • DAdd a condition to the dynamic group rule to exclude the hostname 'web-01'.
   Reveal Solution Discussion Select an answer first