Free CrowdStrike CCFH-202b Exam Dumps Questions & Answers

The Falcon Detections page will attempt to decode Encoded PowerShell Command line parameters when which PowerShell Command line parameter is present?

• A.  -e
• B.  -Hidden
• C.  -Command
• D.  -nop

Which Falcon documentation guide should you reference to hunt for anomalies related to scheduled tasks and other Windows related artifacts?

• A.  Events Data Dictionary
• B.  MITRE-Based Falcon Detections Framework
• C.  Customizable Dashboards
• D.  Hunting and Investigation

While you're reviewing Unresolved Detections in the Host Search page, you notice the User Name column contains "hostnameS " What does this User Name indicate?

• A.  The User Name is not relevant for the dashboard
• B.  The User Name is a System User
• C.  There is no User Name associated with the event
• D.  The Falcon sensor could not determine the User Name

Refer to Exhibit.

What type of attack would this process tree indicate?

• A.  Web Application Attack
• B.  Brute Forcing Attack
• C.  Man-in-the-middle Attack
• D.  Phishing Attack

Lateral movement through a victim environment is an example of which stage of the Cyber Kill Chain?

• A.  Delivery
• B.  Command & Control
• C.  Actions on Objectives
• D.  Exploitation