Besides the command line, what is another supported method to uninstall the Falcon sensor on a Windows host?

Using the Falcon console's 'Uninstall' button

Using the 'Programs and Features' control panel

Running the sensor's uninstall script from the installation media

Deleting the sensor installation folder

Which command would you use to uninstall the Falcon sensor on a Debian-based Linux distribution?

sudo apt-get remove falcon-sensor

sudo /opt/CrowdStrike/falconctl -u

A company is decommissioning a macOS laptop that is used by an executive. The laptop has FileVault enabled. The admin has the maintenance token and needs to uninstall the Falcon sensor. What is the most important consideration?

Reboot the Mac into Recovery Mode to uninstall the sensor.

Ensure the maintenance token is valid for the specific host before starting the uninstall.

Disable FileVault before uninstalling the sensor to avoid data loss.

Back up the FileVault recovery key before uninstalling the sensor.

After uninstalling the Falcon sensor, what is the recommended way to verify that it has been completely removed?

Reboot the host and confirm that no Falcon services start

Check that the host no longer appears in the Falcon console

Delete the sensor installation folder

After uninstalling the Falcon sensor from a Windows host, an admin runs a security scan and finds that the CrowdStrike driver file is still present. The admin wants to ensure complete removal. What should the admin do?

Run a system file checker to repair the driver file.

Reinstall the sensor and then uninstall it again using the Control Panel.

Ignore the driver file because it is harmless.

Manually delete the driver file and verify that the Falcon service is also removed.

CrowdStrikeCertified Falcon Administrator (CCFA)

Domain 2Objective 3

2.3 Uninstall a Sensor CCFA Practice Questions (Page 5)

Part of the Sensor Deployment domain, which makes up ~19% of our current practice bank.

26questions here

6free pages

6concepts

Questions 21–25

21foundation · medium
Besides the command line, what is another supported method to uninstall the Falcon sensor on a Windows host?
Select an answer first
22foundation · medium
Which command would you use to uninstall the Falcon sensor on a Debian-based Linux distribution?
Select an answer first
23expert · hard
A company is decommissioning a macOS laptop that is used by an executive. The laptop has FileVault enabled. The admin has the maintenance token and needs to uninstall the Falcon sensor. What is the most important consideration?
Select an answer first
24foundation · medium
After uninstalling the Falcon sensor, what is the recommended way to verify that it has been completely removed?
Select an answer first
25expert · hard
After uninstalling the Falcon sensor from a Windows host, an admin runs a security scan and finds that the CrowdStrike driver file is still present. The admin wants to ensure complete removal. What should the admin do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCFA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CrowdStrike. “CCFA” is a trademark of its owner, used for identification only.