CCFR-201b 試験問題を無料オンラインアクセス

In the Falcon console, detections can be automated or manual. Which of the following options represents a manual detection?

• A.A detection based on a Custom IOA.
• B.A Falcon Overwatch-pushed detection.
• C.A detection matched against a known Intelligence IOC.
• D.A detection triggered by the Machine Learning engine.

You are notified by a third-party that a program may have redirected traffic to a malicious domain. Which Falcon page will assist you in searching for any domain request information related to this notice?

• A.Spotlight
• B.Discover
• C.Investigate
• D.Falcon X

What action is needed to ensure Falcon does not block or generate a detection for a process by using the file hash?

• A.Create a Custom IOC with an action of allow for the hash
• B.Create a Machine Learning Exclusion with an action of allow for the hash
• C.Create an IOA Exclusion with an action of allow for the hash
• D.Create a Custom IOA with an action of allow for the hash

What information is contained within a Process Timeline?

• A.All cloudable events for a specific host
• B.All cloudable process-related events within a given timeframe
• C.A view of activities on Mac or Linux hosts
• D.Only detection process-related events within a given timeframe

Which statement is TRUE regarding the " Bulk Domains " search?

• A.The " Bulk Domains " search will show IP address and port information for any associated connections
• B.It will show a list of computers and process that performed a lookup of any of the domains in your search
• C.The " Bulk Domains " search will allow you to blocklist your queried domains
• D.You should only pivot to the " Bulk Domains " search tool after completing an investigation