Free CCFR-201b Questions Attempt

CrowdStrike Certified Falcon Responder Questions and Answers

Question 17

Host Search is a powerful investigation tool. From which of the following sources is a responder most likely to pivot directly to a Host Search?

Options:

A global intelligence report about a new adversary.

A specific detection that occurred on a particular host.

The main settings menu of the Falcon console.

The help documentation in the Support portal.

Question 18

A responder needs to view a high-level overview of the environment ' s security posture. Where can they find the ' Activity Dashboard ' ?

Options:

Investigate > Activity Dashboard

Endpoint Security > Monitor > Activity Dashboard

Configuration > General > Activity Dashboard

Support > Analytics > Activity Dashboard

Question 19

Filtering the ' Detection Activity ' report is useful for identifying specific threats. Which of the following filters can not be used on ' Detection Activity ' ?

Options:

Severity

Hash Value

Detection Type

Status

Question 20

What types of events are returned by a Process Timeline?

Options:

Only detection events

All cloudable events

Only process events

Only network events

Summer Certification Sale 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: save70

CrowdStrike Certified Falcon Responder Questions and Answers

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

CompTIA

Fortinet

Microsoft

Salesforce