CCFR-201 무료 덤프문제 온라인 액세스

After pivoting to an event search from a detection, you locate the ProcessRollup2 event. Which two field values are you required to obtain to perform a Process Timeline search so you can determine what the process was doing?

• A.aid and TargetProcessld_decimal
• B.SHA256 and ParentProcessld_decimal
• C.SHA256 and TargetProcessld_decimal
• D.aid and ParentProcessld_decimal

What happens when you create a Sensor Visibility Exclusion for a trusted file path?

• A.It disables detection generation from that path, however the sensor can still perform prevention actions
• B.It excludes host information from Detections and Incidents generated within that file path location
• C.It excludes sensor monitoring and event collection for the trusted file path
• D.It prevents file uploads to the CrowdStrike cloud from that file path

The primary purpose for running a Hash Search is to:

• A.determine the origin of the detection
• B.determine any network connections
• C.review the processes involved with a detection
• D.review information surrounding a hash's related activity

How long does detection data remain in the CrowdStrike Cloud before purging begins?

• A.90 Days
• B.45 Days
• C.14 Days
• D.30 Days

You receive an email from a third-party vendor that one of their services is compromised,thevendor names a specific IP address that the compromised service was using. Where would you input this indicator to find any activity related to this IP address?

• A.IP Addresses
• B.Remote or Network Logon Activity
• C.Remote Access Graph
• D.Hash Executions