exam questions

Exam CCFH-202 All Questions

View all questions & answers for the CCFH-202 exam

Exam CCFH-202 topic 1 question 17 discussion

Actual exam question from CrowdStrike's CCFH-202
Question #: 17
Topic #: 1
[All CCFH-202 Questions]

You want to produce a list of all event occurrences along with selected fields such as the full path, time, username etc. Which command would be the appropriate choice?

  • A. fields
  • B. distinctcount
  • C. table
  • D. values
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
NastyNutsu
2 months ago
Selected Answer: C
...|TABLE fullpath _time username * field is used to include or exclude specified fields in the search results * distinctcount is used to count the distinct values of a field. * values is used to list the unique values of a field but doesn't create a table format for mutiple fields
upvoted 1 times
...
alanalanalan
8 months ago
Selected Answer: C
C. table
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago