| Exam Name: | CrowdStrike Certified Falcon Responder | ||
| Exam Code: | CCFR-201b Dumps | ||
| Vendor: | CrowdStrike | Certification: | CCFR |
| Questions: | 209 Q&A's | Shared By: | brianna |
Which of the following is NOT a valid event type?
A responder needs to find a specific sequence of network connections that did not trigger a detection. Which search tool allows them to search for anything within the raw telemetry?
The Falcon sensor can take several automated actions to protect an endpoint. Which of the following is NOT an action that Falcon takes upon detection?