Shoot it Could be A.Per the CCFA Checklist Notes " Data is only available in the Falcon UI for investigations, etc. through the company’s data retention time frame; detection information is kept for 90 days regardless; UI audits are available for 1 year
Option - A
Note: CrowdStrike keeps detection data in the cloud for 90 days, after which some of the data gets purged from the database. Null icons indicate that some of the data for a process has started to be nullified. It could be a missing tactic, label, metadata or any part of the information pertaining to that process.
The wording of the question makes this confusing. Detections themselves are kept for 90 days but event data is only kept for the event retention set.
upvoted 2 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
vsnt89
2 months, 3 weeks agosilva222222
6 months agoManuneethi
1 year, 4 months agosbag0024
1 year, 5 months agosbag0024
1 year, 5 months agosbag0024
1 year, 5 months agoSynecdoque19
1 year, 5 months agoSoFi443
1 year, 5 months agoFerbOP
1 year, 7 months agooptions862
1 year, 7 months agoplantvast
1 year, 10 months ago