Exam CIS-Discovery topic 1 question 110 discussion

I selected Policies because the question asks "on a CI." "Check" defines the queries or osquery commands that are executed. "Policies" control when and on which CIs those queries are executed. While the Check defines the specific queries, it is the Policy that triggers and executes them on the corresponding devices. In other words, Check Definitions do not execute on their own, and they must be associated with a Policy to be executed, and therefore I believe the correct answer is Policies.

C. Example: Check: A check is created to run the osquery command SELECT * FROM processes; to gather a list of running processes on the CI. Policy: A policy is set up to run this check on all Windows servers every 24 hours. Summary: Checks specify the osquery commands to be run. Policies determine when and on which CIs those checks are executed.