CCFR-201b Exam Question 1
How long does detection data remain in the CrowdStrike Cloud before purging begins?
CCFR-201b Exam Question 2
If the Falcon sensor identifies suspicious behavioral patterns-such as a process attempting to dump memory from lsass.exe-what specific type of detection will be generated?
CCFR-201b Exam Question 3
Executive dashboards provide a high-level view of security. Which of the following CANNOT be seen from the Executive Summary Dashboard?
CCFR-201b Exam Question 4
In the Falcon Overwatch Best Practice workflow, at what specific point is a responder encouraged to utilize OSINT (Open Source Intelligence) searches?
CCFR-201b Exam Question 5
A responder is analyzing a MITRE-related alert and sees the technique 'Explore > Discovery > Cloud Service Dashboard'. Which of the following scenarios best describes the technical activity associated with this technique?
