최신 CCFH-202b 무료덤프 - CrowdStrike Certified Falcon Hunter

문제1

Which of the following is TRUE about a Hash Search?

A. The Hash Search is available on Linux

B. The Hash Search provides Process Execution History

C. Module Load History is not presented in a Hash Search

D. Wildcard searches are not permitted with the Hash Search

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제2

Which tool allows a threat hunter to populate and colorize all known adversary techniques in a single view?

A. OpenXDR

B. MITRE ATT&CK Navigator

C. OWASP Threat Dragon

D. MISP

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제3

Which of the following best describes the purpose of the Mac Sensor report?

A. The Mac Sensor report displays a listing of all Mac hosts without a Falcon sensor installed

B. The Mac Sensor report displays a listing of all Mac hosts with a Falcon sensor installed

C. The Mac Sensor report provides a comprehensive view of activities occurring on Mac hosts, including items of interest that may be hunting or investigation leads

D. The Mac Sensor report provides a detection focused view of known malicious activities occurring on Mac hosts, including machine-learning and indicator-based detections

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제4

When exporting the results of the following event search, what data is saved in the exported file (assuming Verbose Mode)? event_simpleName=*Written | stats count by ComputerName

A. The results of the Statistics tab

B. All events in the Events tab

C. The text of the query

D. No data Results can only be exported when the "table" command is used

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제5

What topics are presented in the Hunting and Investigation Guide?

A. Recommended platform configurations and prevention settings to ensure detections are generated for hunting leads

B. Detailed summary of event names, descriptions, and some key data fields for hunting and investigation

C. Sample hunting queries, select walkthroughs and best practices for hunting with Falcon

D. Detailed tutorial on writing advanced queries such as sub-searches and joins

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제6

You need details about key data fields and sensor events which you may expect to find from Hosts running the Falcon sensor. Which documentation should you access?

A. Streaming API Event Dictionary

B. Hunting and Investigation

C. Events Data Dictionary

D. Event stream APIs

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제7

What do you click to jump to a Process Timeline from many pages in Falcon, such as a Hash Search?

A. PID

B. Process ID or Parent Process ID

C. Process Timeline Link

D. CID

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

최신 CCFH-202b 무료덤프 - CrowdStrike Certified Falcon Hunter

우리와 연락하기

유용한 링크

최신 업데이트