3.7 Recall How Long Inactive Sensors Are Retained CCFA Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A Falcon administrator is notified that a critical server has been offline for 85 days and will soon be removed from the console due to inactivity. The server is expected to come back online in another 30 days after a maintenance window. What action can the administrator take to prevent the sensor record from being removed?

   • ADelete the host record and re-add it manually
   • BReinstall the sensor on the server immediately
   • CExtend the retention period for the inactive sensor
   • DChange the sensor's policy to prevent removal
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company has a fleet of laptops used by field sales representatives who frequently work offline for weeks at a time. The security team is concerned that these laptops will disappear from the Falcon console before the representatives return to the office. Which factor directly determines whether these inactive sensors are retained beyond the default period?

   • AThe license type and entitlement associated with the Falcon subscription
   • BThe sensor version installed on the laptops
   • CThe operating system of the laptops
   • DThe number of hosts in the environment
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A Falcon administrator notices that a server in a remote branch office has not checked in with the Falcon cloud for 14 days. The administrator wants to know how much longer the sensor will remain visible in the Hosts page before it is automatically removed. What is the default retention period for an inactive sensor?

   • A30 days
   • B365 days
   • C180 days
   • D90 days
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A Falcon administrator is comparing two environments. Environment A has a standard subscription, and Environment B has an enterprise subscription with extended retention. Both environments have sensors that have been inactive for 100 days. What is the expected difference in how these sensors are handled?

   • ASensors in Environment B will be removed, while sensors in Environment A will remain visible
   • BBoth environments will retain sensors indefinitely
   • CSensors in Environment A will be removed, while sensors in Environment B may remain visible
   • DSensors in both environments will be removed after 90 days
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A Falcon administrator is cleaning up the Hosts page and wants to remove several sensors that have been inactive for over 100 days. These hosts are decommissioned and will never return. What is the most appropriate action for the administrator to take?

   • AWait for the system to remove them automatically
   • BExtend the retention period for these sensors
   • CManually remove the inactive sensors from the console
   • DChange the host group to exclude them from the view
   Reveal Solution Discussion Select an answer first