Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
Mail Us[email protected]
Menu
 

CrowdStrike CCFH-202 Exam Actual Questions

The questions for CCFH-202 were last updated on Nov. 10, 2024.
  • Viewing page 1 out of 22 pages.
  • Viewing questions 1-4 out of 88 questions
 

Topic 1 - Exam A

Question #1 Topic 1

Which of the following is a suspicious process behavior?

  • A. PowerShell running an execution policy of RemoteSigned
  • B. An Internet browser (eg., Internet Explorer) performing multiple DNS requests
  • C. PowerShell launching a PowerShell script
  • D. Non-network processes (e.g., notepad.exe) making an outbound network connection
Reveal Solution Hide Solution   Discussion   3

Correct Answer: D 🗳️

Question #2 Topic 1

Which field should you reference in order to find the system time of a *FileWritten event?

  • A. ContextTimeStamp_decimal
  • B. FileTimeStamp_decimal
  • C. ProcessStartTime_decimal
  • D. timestamp
Reveal Solution Hide Solution   Discussion   5

Correct Answer: A 🗳️

Question #3 Topic 1

What Search page would help a threat hunter differentiate testing, DevOPs, or general user activity from adversary behavior?

  • A. Hash Search
  • B. IP Search
  • C. Domain Search
  • D. User Search
Reveal Solution Hide Solution   Discussion   4

Correct Answer: D 🗳️

Question #4 Topic 1

An analyst has sorted all recent detections in the Falcon platform to identify the oldest in an effort to determine the possible first victim host. What is this type of analysis called?

  • A. Visualization of hosts
  • B. Statistical analysis
  • C. Temporal analysis
  • D. Machine Learning
Reveal Solution Hide Solution   Discussion   1

Correct Answer: C 🗳️

Next Questions

Get IT Certification

Unlock free, top-quality video courses on ExamTopics with a simple registration. Elevate your learning journey with our expertly curated content. Register now to access a diverse range of educational resources designed for your success. Start learning today with ExamTopics!

Start Learning for free
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel