2.4 Troubleshoot a Sensor CCFA Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   An administrator is troubleshooting a sensor that is 'Disconnected' but the host has internet access. The administrator runs the sensor CLI connectivity test, which fails. The administrator then checks the local firewall and finds that outbound traffic on port 443 is blocked. What should the administrator do to resolve the issue?

   • ADisable the local firewall temporarily to test connectivity.
   • BChange the sensor's proxy settings to use a different port.
   • CModify the local firewall to allow outbound traffic on port 443 to the CrowdStrike cloud.
   • DReinstall the sensor with a different CID.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which sensor CLI command is used to check the sensor's connectivity to the CrowdStrike cloud?

   • Afalconctl uninstall
   • Bfalconctl status
   • Cfalconctl debug
   • Dfalconctl update
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which of the following is a common location where Falcon sensor logs are stored on a Windows endpoint?

   • AC:\Program Files\CrowdStrike\logs
   • BC:\ProgramData\CrowdStrike\logs
   • CC:\Windows\System32\config
   • DC:\Users\Public\Documents\CrowdStrike
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   An administrator is deploying the Falcon sensor to a fleet of Windows servers using a management tool. The installation succeeds on most servers, but on a specific server, the sensor does not appear in the console. The administrator checks the installation log and finds an error indicating the sensor could not register because the 'CID is invalid'. The administrator verifies the CID in the installation command is correct. What should the administrator investigate next?

   • ACheck if the server's system time is significantly skewed from the correct time.
   • BVerify that the server can resolve the CrowdStrike cloud hostname.
   • CReview the sensor's local log for a more detailed error message.
   • DConfirm that the management tool is not modifying the CID during deployment.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   A sensor installation completes successfully, but the sensor does not appear in the Falcon console. Which of the following is the MOST likely reason?

   • AThe sensor is not connected to the internet.
   • BThe sensor's service is disabled in Windows Services.
   • CThe sensor was installed on an unsupported operating system.
   • DThe sensor was installed with the wrong architecture (e.g., 32-bit instead of 64-bit).
   Reveal Solution Discussion Select an answer first