Why is it important to know your company's event data retention limits in the Falcon platform?

• A.Your query will require you to specify the data pool associated with the date you wish to search
• B.Data such as process records are kept for a shorter time than event data
• C.This is not necessary; you simply select "All Time" in your query to search all data
• D.You will not be able to search event data into the past beyond your retention period

Comment: *

Name: *

Email: *

Verification: *

Which role will allow someone to manage quarantine files?

• A.Falcon Security Lead
• B.Detections Exceptions Manager
• C.Falcon Analyst - Read Only
• D.Endpoint Manager

Comment: *

Name: *

Email: *

Verification: *

What is the primary purpose of using glob syntax in an exclusion?

• A.To specify exclusion patterns to easily add files and folders and extensions to be prevented
• B.To specify exclusion patterns to easily exclude files and folders and extensions from detections
• C.To specify a Domain be excluded from detections
• D.To specify a network share be excluded from detections

Comment: *

Name: *

Email: *

Verification: *

What best describes the relationship between Sensor Update policies and Operating Systems?

• A.Windows and Mac share Sensor Update policies. Linux requires its own set of polices based on the different kernel versions
• B.Sensor Update polices are not Operating System specific. One policy can be applied to all Operating Systems
• C.Windows has its own Sensor Update polices. But Mac and Linux share Sensor Update policies
• D.A Sensor Update policy must be configured for each Operating System (Windows, Mac, Linux)

Comment: *

Name: *

Email: *

Verification: *

A sensor that has not contacted the Falcon cloud will be automatically deleted from the hosts list after how many days?

• A.45 Days
• B.60 Days
• C.30 Days
• D.90 Days

Comment: *

Name: *

Email: *

Verification: *