Q: 17
An organization wants to separate their Windows servers and Windows workstations into different groups
for applying distinct policies. What is the most appropriate way to assign these endpoints to groups in
CrowdStrike Falcon?
Options
Discussion
Yep, grouping by OS type just makes sense in Falcon if the goal is to split policies between servers and workstations. A is what I'd choose here, as it's straightforward and scalable. Pretty sure that's how it's done in most setups but open to other ideas if anyone disagrees.
A is the way to go. Grouping by OS type matches up with Falcon’s dynamic groups, so you can assign server policies separate from workstations automatically. Makes everything cleaner, fewer mistakes too. Anyone else doing it another way?
A imo, grouping by OS type is clear and directly targets the need for policy separation between servers and workstations. It’s what I've seen in similar exam scenarios and makes policy application much easier to manage. Simple question, well written too.
Be respectful. No spam.
