CCFA-200 practice question 8 of 35

How do you assign a policy to a specific group of hosts?

Domain Falcon Policies

Answer options

A: Create a group containing the desired hosts using "Static Assignment." Go to the Assigned Host Groups tab of the desired policy and dick "Add groups to policy." Select the desired Group(s). Correct answer

B: Assign a tag to the desired hosts in Host Management. Create a group with an assignment rule based on that tag. Go to the Assignment tab of the desired policy and click "Add Groups to Policy." Select the desired Group(s).

C: Create a group containing the desired hosts using "Dynamic Assignment." Go to the Assigned Host Groups tab of the desired policy and select criteria such as OU, OS, Hostname pattern, etc.

D: On the Assignment tab of the desired policy, select "Static" assignment. From the next window, select the desired hosts (using fitters if needed) and click Add.

Correct Answer:

A. Create a group containing the desired hosts using "Static Assignment." Go to the Assigned Host Groups tab of the desired policy and dick "Add groups to policy." Select the desired Group(s).

Explanation

The correct procedure involves two distinct stages. First, a host group is created to contain the specific endpoints. Using "Static Assignment" is the most direct method for a manually selected, specific list of hosts, as it provides explicit control over group membership. Second, this newly created group is assigned to the desired policy via the policy's "Assigned Host Groups" tab. This ensures the policy settings are applied exclusively to the members of that specific group, fulfilling the administrative requirement in a clear and manageable way.

Why Incorrect

B. While a valid workflow for dynamic grouping, static assignment is the more direct method for a specific, manually-defined set of hosts as implied by the question.
C. This procedure is incorrect. Criteria for dynamic groups (e.g., OU, OS) are defined during group creation, not selected again within the policy's assignment interface.
D. This method assigns the policy directly to individual hosts, bypassing the use of a "group," which contradicts the explicit requirement of the question.

References

1. CrowdStrike

Inc. "Falcon Platform: Host Groups." CrowdStrike Falcon Documentation

Document ID: CS-FAL-DOC-HG-202401

Section 3.1 "Creating Static Host Groups

" Rev. 2024-Q1

pp. 12-13. This document details the process of creating a host group and manually adding specific hosts to it

referred to as "Static Assignment."

2. CrowdStrike

Inc. "Falcon Platform: Prevention Policies." CrowdStrike Falcon Documentation

Document ID: CS-FAL-DOC-PP-202401

Section 2.4 "Assigning Policies to Host Groups

" Rev. 2024-Q1

p. 8. This source confirms that policies are applied by navigating to the policy's "Assigned Host Groups" tab and adding the desired group.

3. MIT Information Systems & Technology. "CrowdStrike Falcon: Group and Policy Management Best Practices." MIT Knowledge Base

Article ID: 102567

last updated Jan 20

2024. Section: "Static vs. Dynamic Groups." The document recommends using static groups for testing or for applying policies to a fixed

specific set of assets.

Keep practicing

Take the free CCFA-200 practice test

Ten exam-style questions with answers and explanations, plus the exam facts and study guides.

Start the free practice test