Câu 16: CCFA-200B: CrowdStrike Certified Falcon Administrator

After successfully installing Falcon on a new employee’s laptop, you notice that the machine is assigned the default prevention policy instead of the custom prevention policy you created. You verify that the Falcon sensor is functioning properly, and you confirm that the custom policy is enabled and successfully running on more than 1,000 other Falcon hosts. What is the likely cause of this issue?

1. A. Falcon requires a 24-hour waiting period to apply custom policies to newly installed hosts
2. B. A host-based firewall rule is preventing the custom policy from applying successfully
3. C. The laptop is not a member of a host group assigned to the custom policy — đáp án hiện tại
4. D. A prompt to apply the new prevention policy was manually declined