CertsTopics Logo

Summer Certification Sale 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: save70

CCFR CCFR-201b Exam Questions and Answers PDF

Page: 3 / 16
Total 209 questions
Get CCFR-201b Full Access Download CCFR-201b PDF

CrowdStrike Certified Falcon Responder Questions and Answers

Question 9

You are writing a script that your colleagues could run on any Windows machine using Real Time Response (RTR). The script you have written is over the 40-KB limit.

How should you run the script to avoid technical issues?

Options:

A.

Use the put command to place the script on the host and runscript -hostpath to run the script

B.

Break the script into multiple files under 40 KB and run each one sequentially with runscript -raw

C.

Use the put command to place the script on the host and runscript -cloudfile to run the script

D.

Use the runscript -cloudfile command to upload the script from your local machine and execute it directly

Question 10

In the Falcon console, detections can be automated or manual. Which of the following options represents a manual detection?

Options:

A.

A detection triggered by the Machine Learning engine.

B.

A Falcon Overwatch-pushed detection.

C.

A detection based on a Custom IOA.

D.

A detection matched against a known Intelligence IOC.

Question 11

What happens when a quarantined file is released?

Options:

A.

It is moved into theC:\CrowdStrike\Quarantine\Releasedfolder on the host

B.

It is allowed to execute on the host

C.

It is deleted

D.

It is allowed to execute on all hosts

Question 12

When using ' User Search ' to investigate a potentially compromised account, which of the following is NOT a filter available in the User Search?

Options:

A.

Username

B.

Hostname

C.

Process ID

D.

Time Range

Page: 3 / 16
Total 209 questions
Get CCFR-201b Full Access Download CCFR-201b PDF