Summer Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: get65

CrowdStrike Updated CCFR-201b Exam Questions and Answers by jan

Page: 15 / 15

CrowdStrike CCFR-201b Exam Overview :

Exam Name: CrowdStrike Certified Falcon Responder
Exam Code: CCFR-201b Dumps
Vendor: CrowdStrike Certification: CCFR
Questions: 209 Q&A's Shared By: jan
Question 60

When a responder needs to take data out of the Falcon console for external analysis, which of the following is NOT an option when exporting searches?

Options:

A.

CSV

B.

JSON

C.

PDF

D.

Gzip

Discussion
Question 61

What are Event Actions?

Options:

A.

Automated searches that can be used to pivot between related events and searches

B.

Pivotable hyperlinks available in a Host Search

C.

Custom event data queries bookmarked by the currently signed in Falcon user

D.

Raw Falcon event data

Discussion
Question 62

When you configure and apply an IOA exclusion, what impact does it have on the host and what you see in the console?

Options:

A.

The process specified is not sent to the Falcon Sandbox for analysis

B.

The associated detection will be suppressed and the associated process would have been allowed to run

C.

The sensor will stop sending events from the process specified in the regex pattern

D.

The associated IOA will still generate a detection but the associated process would have been allowed to run

Discussion
Page: 15 / 15

CCFR-201b
PDF

$36.75  $104.99

CCFR-201b Testing Engine

$43.75  $124.99

CCFR-201b PDF + Testing Engine

$57.75  $164.99