CCFR-201 Exam QuestionsBrowse all questions from this exam

CCFR-201 Exam - Question 31


What is the difference between Managed and Unmanaged Neighbors in the Falcon console?

Show Answer
Correct Answer: B

A managed neighbor refers to a device that has an installed and provisioned sensor, indicating it is actively managed and monitored by the Falcon console. An unmanaged neighbor, on the other hand, does not have such a sensor installed, and is therefore not actively managed within the network.

Discussion

4 comments
Sign in to comment
lightmagentaOption: D
Dec 12, 2023

correct answer is D

lightmagentaOption: D
Dec 12, 2023

correct answer is D

sbag0024Option: B
Jan 31, 2024

B is the correct answer. Has nothing to do with a policy on a managed sensor, nor does it have anything to do with a different segment in the network.

alanalanalanOption: B
May 21, 2024

Answer B, Refer to document "Falcon Documentation > Exposure Management > Asset Management > Assets" Data retention and refreshing Data about assets is retained for different periods of time: Managed assets: 45 days after the asset was most recently seen Unmanaged and unsupported assets: 7 days after the asset was most recently seen through passive discovery 45 days after the asset was most recently seen through third-party ingestion Most data begins to appear as soon as the sensor on a managed asset connects to the CrowdStrike cloud. An asset with the Falcon sensor newly installed moves from unmanaged assets to managed assets after its sensor first connects to the CrowdStrike cloud. Data refreshes when a Falcon sensor connects to the CrowdStrike cloud and when the sensor detects any changes. Some data also refreshes at regular intervals as described throughout the documentation.