3.8 Determine Relevant Reports Specific to Host Management CCFA Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   A Falcon administrator needs a report that lists all hosts currently enrolled in the Falcon console, including their last-seen timestamps and sensor versions. Which report type provides this information?

   • AIOA (Indicators of Attack) report
   • BDetection Summary report
   • CHost Management report
   • DIncidents report
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   An administrator needs to share a Host Management report with a colleague who does not have access to the Falcon console. What is the most appropriate way to share the report?

   • AGrant the colleague temporary access to the Falcon console
   • BTake a screenshot of the report and send it
   • CCopy and paste the report data into a chat message
   • DExport the report as a CSV file and email it to the colleague
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A team lead wants to see a report of all hosts with a specific policy applied. The administrator needs to generate this report and share it with the team. What is the correct way to generate this report?

   • ANavigate to Policies > Hosts, filter by policy, and export the view.
   • BNavigate to Reports > Hosts, filter by policy, generate the report, and export it.
   • CNavigate to Reports > Policies, select the policy, and generate the report.
   • DNavigate to Hosts > Policies, filter by policy, and generate a report.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   To generate a report that shows all hosts with a specific sensor version, what is the first step an administrator should take in the Falcon console?

   • AOpen the Hosts page and export the current view
   • BNavigate to the Reports section and select the Host Management report
   • CUse the API to query host data
   • DCreate a custom dashboard widget
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   An administrator reviews the 'Hosts' report and sees that a host has a sensor version that is no longer supported. The administrator needs to understand the impact of this on the host's protection. What should the administrator do?

   • AGenerate a new report with a different date range to see if the host appears.
   • BCheck the host's status in the Hosts page to see if it is still protected.
   • CReview the report's data for any errors or missing information.
   • DAssume the host is unprotected and immediately reinstall the sensor.
   Reveal Solution Discussion Select an answer first