最新的CrowdStrike Certified Falcon Responder - CCFR-201b免費考試真題
Depending on the subscription level, " Cloudable Events " (standard telemetry) have a specific retention period. What is the minimum period of time that these events are retained?
正確答案: B
An executive asks for a definition of ' CrowdScore ' . Which of the following sentences best describes what CrowdScore is?
正確答案: D
The Falcon sensor can automatically upload quarantined files to the CrowdStrike Cloud for further analysis.
What is the maximum size allowed for a quarantined file to be uploaded?
What is the maximum size allowed for a quarantined file to be uploaded?
正確答案: C
While quarantined files stay on the local host for 30 days by default, how many days does a quarantined file remain stored in the CrowdStrike Cloud?
正確答案: A
While in an Event Search, a responder clicks on an event action. What does the ' Show Child Processes ' event action do?
正確答案: C
Which of the following statements about the ' Hash Search ' (Single Search) is TRUE?
正確答案: C
An analyst is triaging a detection that has been categorized under the 'Follow Through' Objective Layer.
Based on the Falcon technical documentation, which of the following adversary tactics is most likely to be observed within this specific layer?
Based on the Falcon technical documentation, which of the following adversary tactics is most likely to be observed within this specific layer?
正確答案: A
When reviewing CrowdScore Incidents, which of the following statements is INCORRECT?
正確答案: D
Refer to the image.
Within a Host Search, you have filtered for cmd.exe in the Process executions table and now need to pivot to a process timeline.
Which item in the table do you select to pivot to the Process Timeline?
Within a Host Search, you have filtered for cmd.exe in the Process executions table and now need to pivot to a process timeline.
Which item in the table do you select to pivot to the Process Timeline?
正確答案: A
說明：（僅 Fast2test 成員可見）
When a responder is looking at the ' Full Detection Details ' page, they can toggle between several views.
Which of the following is NOT a layout option available for viewing these details?
Which of the following is NOT a layout option available for viewing these details?
正確答案: A
During the triage of a detection involving a newly created persistent task, which specific indicator is most important for a responder to identify the actual intent of the service?
正確答案: D
Which statement is TRUE regarding the " Bulk Domains " search?
正確答案: C
In the context of raw event searching, the term ' ProcessRollup2 ' refers to a value within which field?
正確答案: A
Bulk Search tools have several features in common. Which of the following is incorrect as a feature common to all Bulk Search types?
正確答案: A