Sensor Installation Flashcards

1
Q

Does Falcon cloud support SSL?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

WindowsSensor.exe /install /quiet /norestart CID=(cid)

A

Windows Cmd Install

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Tags that assign metadata to hosts, used to filter hosts

A

Sensor Tags

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

WindowsSensor.exe /install /quiet /norestart CID=(cid) Grouping_Tags=”washington/DC_USA, prod”

A

Windows cmd install with Sensor Tags

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

what needs to happen if sensor tags need to be changed after the install?

A

A registry key must be changed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

APP_PROXYNAME=
APP_PROXYPORT=
OR PACURL

A

Proxy Configuration (1)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

PACURL=

OR proxy name and port

A

Proxy Configuration (2)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

NO_START=1 (good for master image prep)

A

Sensor does not start until reboot

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

with uninstall and maint. protection turned on, what is needed to uninstall the sensor?

A

CS uninstall tool & uninstall token

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

csuninstalltool.exe MAINTENANCE_TOKEN= /quiet

A

cmd to uninstall sensor for windows

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

sudo installer -verboseR -package

A

Install for Mac

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

/library/cs/

A

License tool location for Mac

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

sudo /library/cs/falconctl license ……

A

license

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

sudo /library/cs/falconctl uninstall –maintenance -token

A

cmd for Mac offline, maint token

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

sudo /library/cs/falconctl uninstall

A

cmd for Mac online

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Linux Falcon tool the ensures the Falcon sensor will be fully operational by checking compatibility

A

falcon-kernel-check tool

17
Q

mode in the which the Falcon sensor will work if it is incompatible with the sensor

A

RFM - Reduced Functionality Mode

18
Q

sudo /opt/crowdstrike/falconctl -s -cid=

A

Linux install

19
Q

service falcon-sensor start

A

Start sensor for hosts with systevinit (linux)

20
Q

systemctl start falcon-sensor

A

Start sensor for hosts with systemd (Linux)

21
Q

ps -e | grep falcon-sensor

A

Confirm the Linux Sensor is running

22
Q

sudo /opt/crowdstrike/falconctl -s -aph –app=

A

Configure proxy, Linux

23
Q

sudo /opt/crowdstrike/falconctl -g -aph -app

A

Confirm Settings

24
Q

sudo /opt/crowdstrike/falconctl -s -apd=FALSE

A

Enable Proxy - Linux

25
Q

sudo /opt/crowdstrike/falconctl -s -apd=TRUE

A

Disable Proxy - Linux

26
Q

sudo apt-get purge falcon-sensor

A

ubuntu uninstall

27
Q

sudo yum remove falcon-sensor

A

Rhat, CentOS, Amazon Linux uninstall

28
Q

sudo zipper remove falcon-sensor

A

SLES uninstall

29
Q

LMHosts, (base filtering engine) BFE, (network store interface) NSI, Windows Power Service

A

Windows Services that must be running for deployment