Free CrowdStrike CCFR-201 Exam Dumps Questions & Answers

What information does the MITRE ATT&CKFramework provide?

• A.  It provides the phases of an adversary's lifecycle, the platforms they are known to attack, and the specific methods they use
• B.  It provides a step-by-step cyber incident response strategy
• C.  It provides best practices for different cybersecurity domains, such as Identify and Access Management
• D.  It is a system that attributes an attack techniques to a specific threat actor

Which of the following is NOT a valid event type?

• A.  ProcessRollup2
• B.  EndofProcess
• C.  DnsRequest
• D.  StartofProcess

Which option indicates a hash is allowlisted?

• A.  No Action
• B.  Allow
• C.  Always Block
• D.  Ignore

Which of the following is returned from the IP Search tool?

• A.  IP Summary information from Falcon events containing the given IP
• B.  Unmanaged host data from system ARP tables for the given IPD.IP Detection Summary information for detection events containing the given IP
• C.  Threat Graph Data for the given IP from Falcon sensors

Which statement is TRUE regarding the "Bulk Domains" search?

• A.  The "Bulk Domains" search will allow you to blocklist your queried domains
• B.  The "Bulk Domains" search will show IP address and port information for any associated connectionsD.You should only pivot to the "Bulk Domains" search tool after completing an investigation
• C.  It will show a list of computers and process that performed a lookup of any of the domains in your search