Do not use a standard installation on a virtual machine. If you perform a standard install on a template, all VMs created from that template will be assigned the same Agent ID (AID). If the same AID is inadvertently assigned to more than one VM, events and detections from your various VMs would appear to be from a single host.
From CrowdStrike’s VM installation guidance, when you deploy on machines that will be used as persistent clones, you must prevent the sensor from starting so that each cloned VM gets a unique Agent ID on first boot. To do this, install with the NO_START=1 parameter.
This section is not available anymore. Please use the main Exam Page.CCFA Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
CiscoNoahexamtopic
1 week, 4 days agoCiscoNoahexamtopic
1 week, 4 days ago93d74a2
1 month, 1 week ago