CCFR-201 試験問題を無料オンラインアクセス

The function of Machine Learning Exclusions is to___________.

• A.stop all sensor data collection for the matching path(s)
• B.stop all ML-based detections and preventions for the matching path(s) and/or stop files from being uploaded to the CrowdStrike Cloud
• C.Stop all Machine Learning Preventions but a detection will still be generated and files will still be uploaded to the CrowdStrike Cloud
• D.stop all detections for a specific pattern ID

When examining a raw DNS request event, you see a field called ContextProcessld_decimal. What is the purpose of that field?

• A.It contains the TargetProcessld_decimal value for the process that made the DNS request
• B.It contains the TargetProcessld_decimal value for other related events
• C.It contains the ContextProcessld_decimal value for the parent process that made the DNS request
• D.It contains an internal value not useful for an investigation

In the "Full Detection Details", which view will provide an exportable text listing of events like DNS requests.
Registry Operations, and Network Operations?

• A.View as Process Tree
• B.View as Process Activity
• C.View as Process Timeline
• D.Thedata is unable to be exported

Which is TRUE regarding a file released from quarantine?

• A.It is allowed to execute on all hosts
• B.No executions are allowed for 14 days after release
• C.It is deleted
• D.It will not generate future machine learning detections on the associated host

What happens when a quarantined file is released?

• A.It is allowed to execute on all hosts
• B.It is moved into theC:\CrowdStrike\Quarantine\Releasedfolder on the host
• C.It is deleted
• D.It is allowed to execute on the host