CCFR-201 試験問題を無料オンラインアクセス

What happens when you open the full detection details?

• A.Theprocess explorer opens and the detection is removed from the console
• B.The process explorer opens and you're able to view the processes and process relationships
• C.The process explorer opens and the Event Search query is run for the detection
• D.The process explorer opens and the detection copies to the clipboard

What action is used when you want to save a prevention hash for later use?

• A.Never Block
• B.Always Allow
• C.Always Block
• D.No Action

What happens when a hash is set to Always Block through IOC Management?

• A.The hash is submitted for approval to be blocked from execution once confirmed by Falcon specialists
• B.Execution is prevented and detection alerts are suppressed
• C.Execution is prevented on all hosts by default
• D.Execution is prevented on selected host groups

How long does detection data remain in the CrowdStrike Cloud before purging begins?

• A.45 Days
• B.14 Days
• C.90 Days
• D.30 Days

Sensor Visibility Exclusion patterns are written in which syntax?

• A.Glob Syntax
• B.SPL(Splunk)
• C.RegEx
• D.Kleene Star Syntax