CCFR-201 무료 덤프문제 온라인 액세스

What happens when a hash is set to Always Block through IOC Management?

• A.The hash is submitted for approval to be blocked from execution once confirmed by Falcon specialists
• B.Execution is prevented on all hosts by default
• C.Execution is prevented on selected host groups
• D.Execution is prevented and detection alerts are suppressed

Which of the following is returned from the IP Search tool?

• A.Unmanaged host data from system ARP tables for the given IPD.IP Detection Summary information for detection events containing the given IP
• B.IP Summary information from Falcon events containing the given IP
• C.Threat Graph Data for the given IP from Falcon sensors

Which is TRUE regarding a file released from quarantine?

• A.No executions are allowed for 14 days after release
• B.It is deleted
• C.It is allowed to execute on all hosts
• D.It will not generate future machine learning detections on the associated host

What is an advantage of using a Process Timeline?

• A.Process related events can be filtered to display specific event types
• B.Suspicious processes are color-coded based on their frequency and legitimacy over time
• C.A visual representation of Parent-Child and Sibling process relationships is provided
• D.Processes responsible for spikes in CPU performance are displayed overtime

When looking at the details of a detection, there are two fields called Global Prevalence and Local Prevalence.
Which answer best defines Local Prevalence?

• A.Local prevalence is the frequency with which the hash of the triggering file is seen across all CrowdStrike customer environments
• B.Local Prevalence tells you how common the hash of the triggering file is within your environment (CID)
• C.Local Prevalence is the Virus Total score for the hash of the triggering file
• D.Local prevalence is the frequency with which the hash of the triggering file is seen across the entire Internet