Which of the following controls the speed in which your sensors will receive automatic sensor updates?

The “Sensor Update Throttling” option—configured inside a Sensor Update Policy—defines how many sensors (or percentage of sensors) are allowed to download and install a new sensor version within a given time window. By limiting concurrent downloads it directly governs the speed at which automatic sensor updates are rolled out across the environment.

A. Maintenance Tokens – Used to temporarily disable protection or uninstall a sensor; they have no influence on update distribution speed.

B. Sensor Update Policy – Selects the sensor version/track and assignment scope, but the rate-control function inside the policy is specifically called “Sensor Update Throttling.”

D. Channel File Update Throttling – Controls the rollout of Falcon content/channel files (e.g., ML models), not the sensor binary itself.

1. CrowdStrike Falcon User Guide v6.38, “Using Sensor Update Policies – Sensor Update Throttling,” p. 412–413.

2. CrowdStrike Sensor Update Policy Guide (doc ID CS-SUPG-2023-03), Section “Throttling Options,” p. 6.

3. CrowdStrike University, CCFA-200 Courseware v2023.2, Module 6 “Sensor Update Policy,” slide 14.

4. CrowdStrike Support KB article #KB-16595, “Configuring Sensor Update Throttling,” para. 2–3 (accessed 2024-05-26).