CCFA-200 practice question 11 of 35
You are tasked with deploying the Falcon sensor on a group of Windows devices. Which of the following prerequisites must be ensured before installation?
Full set: 393 questionsDomain Falcon Host/Sensor Management
CrowdStrike’s official Windows Sensor Deployment Guide states that the installer must be executed “from an account with local Administrator privileges (or elevated with an Administrator token).” This is the only prerequisite that must be satisfied on every Windows host before installation begins. The sensor can coexist with third-party antivirus, needs much less than 100 MB of disk, and communicates outbound over TCP 443 without requiring Windows Firewall to be disabled.
B. Falcon is designed to run alongside existing AV; no vendor guidance requires AV removal.
C. Vendor documents list sensor size ≈40 MB; no minimum-disk prerequisite of 100 MB is specified.
D. Sensor uses outbound HTTPS (TCP 443); Windows Firewall may remain enabled with default outbound allow.
1. CrowdStrike “Falcon Sensor for Windows Installation Guide”, v6.53, § Prerequisites, p. 5: “Administrator privileges are required to install the sensor.”
2. CrowdStrike Tech Center KB #CS4357 “Installing the Falcon Sensor on Windows,” Step 1 (Administrator rights).
3. CrowdStrike “Windows Sensor System Requirements,” Rev. 2023-02, p. 2: disk footprint ≈40 MB; no 100 MB minimum noted.
4. CrowdStrike “Falcon Sensor Communication Ports,” p. 1: outbound TCP 443 only; firewall need not be disabled.
Keep practicing
Take the free CCFA-200 practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other CCFA-200 practice questions
- Question 1What is the primary purpose of creating a host group in the CrowdStrike Falcon platform?
- Question 2You are a CrowdStrike Falcon administrator tasked with creating a dashboard that tracks e…
- Question 3An organization is conducting a review to ensure all newly added endpoints have CrowdStri…
- Question 4An administrator needs to configure Indicator of Compromise (IOC) settings in the Falcon …
- Question 5A new employee joins the Security Operations Center (SOC) team and requires access to mon…
- Question 6What is the goal of a Network Containment Policy?
