BlackFriday 2024! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

CrowdStrike Exam CCFR-201 Topic 1 Question 7 Discussion

Actual exam question for CrowdStrike's CCFR-201 exam
Question #: 7
Topic #: 1
[All CCFR-201 Questions]

Which of the following is NOT a filter available on the Detections page?

Show Suggested Answer Hide Answer
Suggested Answer: D

According to theCrowdStrike Falcon Data Replicator (FDR) Add-on for Splunk Guide, the Detections page allows you to view and manage detections generated by the CrowdStrike Falcon platform2.You can use various filters to narrow down the detections based on criteria such as severity, CrowdScore, time, tactic, technique, etc2.However, there is no filter for triggering file, which is the file that caused the detection2.


by Buddy at Feb 12, 2024, 05:14 AM

Limited Time Offer

25%

Off

Get Premium CCFR-201 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel
Mignon
6 months ago
Yeah, I remember now that Time is a filter. Triggering File seems like the odd one out.
upvoted 0 times
...
Lavonda
6 months ago
No, Time is definitely a filter option on the Detections page.
upvoted 0 times
...
Melita
6 months ago
I'm not sure, I think it could be C) Time.
upvoted 0 times
...
Mignon
6 months ago
I agree with Lavonda, Triggering File doesn't sound like a filter option.
upvoted 0 times
...
Lavonda
6 months ago
I think the answer is D) Triggering File.
upvoted 0 times
...

Save Cancel