Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
exam questions

Exam CCFR-201 All Questions

View all questions & answers for the CCFR-201 exam

Exam CCFR-201 topic 1 question 46 discussion

Actual exam question from CrowdStrike's CCFR-201
Question #: 46
Topic #: 1
[All CCFR-201 Questions]

When analyzing an executable with a global prevalence of common; but you do not know what the executable is, what is the best course of action?

  • A. Do nothing, as this file is common and well known
  • B. From detection, click the VT Hash button to pivot to VirusTotal to investigate further
  • C. From detection, use API manager to create a custom blocklist
  • D. From detection, submit to FalconX for deep dive analysis
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
alanalanalan
6 months ago
Selected Answer: B
Answer is B, check with the VT.
upvoted 1 times
...
silva222222
6 months, 1 week ago
Selected Answer: B
The best course of action when analyzing an executable with a global prevalence of "common" but unknown functionality is: B. From detection, click the VT Hash button to pivot to VirusTotal to investigate further
upvoted 1 times
...
kangaru
9 months, 2 weeks ago
Selected Answer: B
You don't know what the hash corresponds to, then look in VT. It provides you all details of the hash together with it's reputation.
upvoted 1 times
...
sbag0024
9 months, 3 weeks ago
Selected Answer: B
Going with B on this one. It is an option when looking at Full detection details.
upvoted 1 times
...
sbag0024
9 months, 3 weeks ago
Going with B on this one. It is an option when looking at Full detection details.
upvoted 1 times
...
Aicha78
11 months ago
B is correct
upvoted 1 times
...
wildbandana
11 months, 2 weeks ago
Selected Answer: C
100% sure
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...