Free CCFA-200 Actual Exam Questions s - Question 15 Discussion
inactive hosts are appropriately monitored or removed?
C imo since the Host Group Membership Report can help identify if hosts still belong to active groups, which might be crucial for deciding if they should be monitored or removed.
A/B? A is great for quick checks on activity, but B could give more detailed context about the host’s overall state, which might help decide if it’s truly inactive or just temporarily offline.
D imo since the Application Inventory Report can reveal if hosts aren’t running any apps, which might hint they’re inactive or ready to be removed. It’s a different angle than just last seen timestamps.
It’s A because the Sensor Last Seen Report directly shows the last time each host checked in, which is exactly what you need to spot inactive machines quickly. The other reports give good info but don’t focus on activity timestamps as clearly. For monitoring or deciding when to remove hosts, knowing when they were last seen is the most straightforward approach.
Maybe A since it directly shows when each sensor was last active, perfect for spotting inactivity.
It’s B because the Host Audit Report covers comprehensive details about each host, not just last activity, helping to identify inactive hosts with more context on their status and configurations.
It’s B because the Host Audit Report provides a detailed snapshot of host status and configurations, which helps identify inactive or outdated machines beyond just last seen times, giving a broader monitoring scope.
Seems like the best fit here is A. Sensor Last Seen Report. It directly shows when hosts were last active, so you can spot inactive ones to review or remove. Options B and C don’t focus so much on activity timelines, and D is more about apps running rather than host status. Makes sense to use A for this kind of monitoring task.