CCFR-201b Exam Question 51
When an analyst downloads a quarantined file from the Falcon UI for offline analysis, what is the specific file format and the required password for extraction?
CCFR-201b Exam Question 52
When a responder chooses to 'Release' a file from quarantine because it was determined to be a false positive, what type of allowlist is automatically created in the background?
CCFR-201b Exam Question 53
Which of the following subtitles/sub-views cannot be seen in the results of a 'Hash Search'?
CCFR-201b Exam Question 54
You receive an email from a third-party vendor that one of their services is compromised,thevendor names a specific IP address that the compromised service was using. Where would you input this indicator to find any activity related to this IP address?
CCFR-201b Exam Question 55
During the incident response process, a responder must update the status of a detection. Which of the following options is NOT a valid detection status recognized by the Falcon console?