3.7 Recall How Long Inactive Sensors Are Retained CCFA Practice Questions (Page 2)

Questions 6–8

1. 6application · medium

   A Falcon administrator is investigating why a sensor that has been inactive for 95 days is still visible in the Hosts page. The administrator checks the host details and sees that the sensor was manually extended. What does this indicate about the retention process?

   • AThe sensor will be removed at the next scheduled cleanup
   • BThe administrator previously extended the retention period for this specific sensor
   • CThe sensor is protected from removal indefinitely
   • DThe sensor will be removed after 90 days from the extension date
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A Falcon administrator is troubleshooting why a sensor that has been inactive for 80 days is not appearing in the Hosts page. The administrator checks the host details and sees that the sensor was manually removed 5 days ago. What is the most likely reason the sensor is not visible?

   • AThe sensor's policy is preventing it from appearing
   • BThe sensor was manually removed by an administrator
   • CThe sensor was removed automatically due to inactivity
   • DThe sensor is in a different Falcon cloud region
   Reveal Solution Discussion Select an answer first
3. 8expert · hard

   A Falcon administrator is managing a fleet of sensors and needs to remove a group of decommissioned hosts from the Hosts page. The administrator wants to ensure that these hosts are permanently removed and do not reappear. What is the most appropriate action?

   • AManually remove the sensors and verify they do not reappear
   • BChange the host group to exclude them from the view
   • CExtend the retention period for these sensors
   • DWait for the system to remove them automatically
   Reveal Solution Discussion Select an answer first