CCFA-200 practice question 11 of 35

You are tasked with deploying the Falcon sensor on a group of Windows devices. Which of the following prerequisites must be ensured before installation?

Full set: 393 questions

Domain Falcon Host/Sensor Management

Answer options
A: The Windows devices must have administrative privileges for the installation. Correct answer
B: The Windows devices must have antivirus software uninstalled before installing the Falcon sensor.
C: The Windows devices must have a minimum of 100 MB of free disk space.
D: The Windows Firewall must be disabled to allow sensor communication.
Correct Answer:
A. The Windows devices must have administrative privileges for the installation.
Explanation

CrowdStrike’s official Windows Sensor Deployment Guide states that the installer must be executed “from an account with local Administrator privileges (or elevated with an Administrator token).” This is the only prerequisite that must be satisfied on every Windows host before installation begins. The sensor can coexist with third-party antivirus, needs much less than 100 MB of disk, and communicates outbound over TCP 443 without requiring Windows Firewall to be disabled.

Why Incorrect

B. Falcon is designed to run alongside existing AV; no vendor guidance requires AV removal.
C. Vendor documents list sensor size ≈40 MB; no minimum-disk prerequisite of 100 MB is specified.
D. Sensor uses outbound HTTPS (TCP 443); Windows Firewall may remain enabled with default outbound allow.

References

1. CrowdStrike “Falcon Sensor for Windows Installation Guide”, v6.53, § Prerequisites, p. 5: “Administrator privileges are required to install the sensor.”

2. CrowdStrike Tech Center KB #CS4357 “Installing the Falcon Sensor on Windows,” Step 1 (Administrator rights).

3. CrowdStrike “Windows Sensor System Requirements,” Rev. 2023-02, p. 2: disk footprint ≈40 MB; no 100 MB minimum noted.

4. CrowdStrike “Falcon Sensor Communication Ports,” p. 1: outbound TCP 443 only; firewall need not be disabled.

Scroll to Top