CCFR-201b Exam Question 76

The Falcon console is divided into several modules. Timelines (Host and Process) are technically a part of which Falcon page?
  • CCFR-201b Exam Question 77

    Which of the following tactic and technique combinations is sourced from MITREATT AND CKinformation?
  • CCFR-201b Exam Question 78

    In the full detection tree view, icons provide visual cues about the telemetry. What does the specific icon representing a 'Falcon' (blue bird) indicate to the responder?
  • CCFR-201b Exam Question 79

    Responders use 'IP Search' to track connections to malicious infrastructure. Which of the following statements about the IP Search is FALSE?
  • CCFR-201b Exam Question 80

    While reviewing the high-level organizational structure of a complex detection in the Falcon console, a responder identifies several layers of activity. Which of the following is NOT officially recognized as an Objective Layer within the CrowdStrike detection hierarchy?