最新的CrowdStrike Certified Falcon Hunter - CCFH-202免費考試真題
問題1
You are reviewing a list of domains recently banned by your organization's acceptable use policy. In particular, you are looking for the number of hosts that have visited each domain. Which tool should you use in Falcon?
正確答案: A
說明：（僅 VCESoft 成員可見）
問題2
The Events Data Dictionary found in the Falcon documentation is useful for writing hunting queries because:
正確答案: B
說明：（僅 VCESoft 成員可見）
問題3
Event Search data is recorded with which time zone?
正確答案: A
說明：（僅 VCESoft 成員可見）
問題4
What information is shown in Host Search?
正確答案: D
說明：（僅 VCESoft 成員可見）
問題5
With Custom Alerts you are able to configure email alerts using predefined templates so you're notified about specific activity in your environment. Which of the following outlines the steps required to properly create a custom alert rule?
正確答案: B
說明：（僅 VCESoft 成員可見）
問題6
The Process Timeline Events Details table will populate the Parent Process ID and the Parent File columns when the cloudable Event data contains which event field?
正確答案: B
說明：（僅 VCESoft 成員可見）
問題7
In which of the following stages of the Cyber Kill Chain does the actor not interact with the victim endpoint(s)?
正確答案: B
說明：（僅 VCESoft 成員可見）
