CrowdStrike Exam CCFR-201 Topic 1 Question 29 Discussion

Actual exam question for CrowdStrike's CCFR-201 exam

Question #: 29
Topic #: 1

The Process Activity View provides a rows-and-columns style view of the events generated in a detection. Why might this be helpful?

AThe Process Activity View creates a consolidated view of all detection events for that process that can be exported for further analysis

BThe Process Activity View will show the Detection time of the earliest recorded activity which might indicate first affected machine

CThe Process Activity View only creates a summary of Dynamic Link Libraries (DLLs) loaded by a process

DThe Process Activity View creates a count of event types only, which can be useful when scoping the event

Show Suggested Answer

Suggested Answer: A

by Brock at Nov 13, 2024, 07:56 PM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!