Free CrowdStrike CCFR-201 Exam Dumps Questions & Answers

What information is contained within a Process Timeline?

• A.  All cloudable process-related events within a given timeframe
• B.  A view of activities on Mac or Linux hosts
• C.  All cloudable events for a specific host
• D.  Only detection process-related events within a given timeframe

What happens when a quarantined file is released?

• A.  It is allowed to execute on the host
• B.  It is deleted
• C.  It is allowed to execute on all hosts
• D.  It is moved into theC:\CrowdStrike\Quarantine\Releasedfolder on the host

You are notified by a third-party that a program may have redirected traffic to a malicious domain. Which Falcon page will assist you in searching for any domain request information related to this notice?

• A.  Falcon X
• B.  Spotlight
• C.  Investigate
• D.  Discover

In the "Full Detection Details", which view will provide an exportable text listing of events like DNS requests.
Registry Operations, and Network Operations?

• A.  Thedata is unable to be exported
• B.  View as Process Timeline
• C.  View as Process Activity
• D.  View as Process Tree

When looking at the details of a detection, there are two fields called Global Prevalence and Local Prevalence.
Which answer best defines Local Prevalence?

• A.  Local Prevalence is the Virus Total score for the hash of the triggering file
• B.  Local Prevalence tells you how common the hash of the triggering file is within your environment (CID)
• C.  Local prevalence is the frequency with which the hash of the triggering file is seen across all CrowdStrike customer environments
• D.  Local prevalence is the frequency with which the hash of the triggering file is seen across the entire Internet