최신CrowdStrike Certified Falcon Hunter - CCFH-202무료샘플문제
문제1
A benefit of using a threat hunting framework is that it:
A benefit of using a threat hunting framework is that it:
정답: C
설명: (ITDumpsKR 회원만 볼 수 있음)
문제2
The Process Timeline Events Details table will populate the Parent Process ID and the Parent File columns when the cloudable Event data contains which event field?
The Process Timeline Events Details table will populate the Parent Process ID and the Parent File columns when the cloudable Event data contains which event field?
정답: A
설명: (ITDumpsKR 회원만 볼 수 있음)
문제3
In the Powershell Hunt report, what does the "score" signify?
In the Powershell Hunt report, what does the "score" signify?
정답: B
설명: (ITDumpsKR 회원만 볼 수 있음)
문제4
What topics are presented in the Hunting and Investigation Guide?
What topics are presented in the Hunting and Investigation Guide?
정답: B
설명: (ITDumpsKR 회원만 볼 수 있음)
문제5
Which tool allows a threat hunter to populate and colorize all known adversary techniques in a single view?
Which tool allows a threat hunter to populate and colorize all known adversary techniques in a single view?
정답: D
설명: (ITDumpsKR 회원만 볼 수 있음)
문제6
Which of the following is a recommended technique to find unique outliers among a set of data in the Falcon Event Search?
Which of the following is a recommended technique to find unique outliers among a set of data in the Falcon Event Search?
정답: D
설명: (ITDumpsKR 회원만 볼 수 있음)
문제7
When exporting the results of the following event search, what data is saved in the exported file (assuming Verbose Mode)? event_simpleName=*Written | stats count by ComputerName
When exporting the results of the following event search, what data is saved in the exported file (assuming Verbose Mode)? event_simpleName=*Written | stats count by ComputerName
정답: B
설명: (ITDumpsKR 회원만 볼 수 있음)