| Exam Name: | CrowdStrike Certified Falcon Responder | ||
| Exam Code: | CCFR-201b Dumps | ||
| Vendor: | CrowdStrike | Certification: | CCFR |
| Questions: | 209 Q&A's | Shared By: | oliwier |
When training a new team member on how to interpret Falcon telemetry, a senior responder explains the definition of a ' Tactic ' . Which of the following sentences best captures the technical definition of a Tactic in this context?
While quarantined files stay on the local host for 30 days by default, how many days does a quarantined file remain stored in the CrowdStrike Cloud?
The Falcon console integrates heavily with the MITRE ATT AND CK framework to provide industry-standard context. Which of the following tactics displayed in the detection UI is a direct implementation of a MITRE ATT AND CK tactic?
What types of events are returned by a Process Timeline?