Free CCFA-200 Actual Exam Questions s - Question 3 Discussion
installed. Which report should the administrator use to identify hosts without sensors?
It’s C because the Host Inventory shows all devices, making it easy to spot those without sensors.
B imo because the Policy Assignment Report would show which devices have the sensor policies applied, which indirectly indicates if sensors are installed. If a host isn’t assigned the policy, it likely doesn’t have the sensor either. A and C are useful but might not clearly flag unprotected endpoints, while D is definitely unrelated since it’s about active response sessions. Checking policy assignments feels like a solid way to catch any endpoints missing sensors from the get-go.
C imo since it gives a full list of hosts, so you can easily spot ones missing sensors instead of just showing sensor condition like A might do. More straightforward for this check.
A/D? The Real-Time Response Activity Report is more about active sessions, so probably not useful here. Sensor Status Report should cover all registered endpoints with sensors, including offline ones, so it might catch missing sensors better than Host Inventory.
A/C? I think A focuses on sensor health but might miss offline or newly added ones without sensors, while C lists all hosts so it’s easier to spot those completely missing sensors by elimination.
C The Host Inventory Report should list all hosts regardless of sensor status, so you can spot any that don’t have sensors installed by comparing the list with expected endpoints. It’s more comprehensive than just checking sensor health.
A/C? I’m thinking the Sensor Status Report (A) is designed specifically to show sensor installation and health, so it should highlight missing sensors more clearly than just a list of hosts in the Host Inventory Report (C). The inventory might show you all endpoints, but it won’t necessarily flag which ones lack sensors. So for quick identification, A seems more on point here.
The Host Inventory Report (C) lists all machines, so missing sensors should stand out there.
Guessing A because Sensor Status Report should directly indicate sensor health or presence, making it easier to spot endpoints without sensors compared to just listing hosts like C.
I think the Host Inventory Report (C) might help here since it should list all hosts, and you can spot which ones don’t have sensors installed. Tom B.
Not sure which one directly shows missing sensors. Does the Sensor Status Report (A) actually list hosts without sensors too?