CCFR-201b Exam Question 1

How long does detection data remain in the CrowdStrike Cloud before purging begins?
  • CCFR-201b Exam Question 2

    If the Falcon sensor identifies suspicious behavioral patterns-such as a process attempting to dump memory from lsass.exe-what specific type of detection will be generated?
  • CCFR-201b Exam Question 3

    Executive dashboards provide a high-level view of security. Which of the following CANNOT be seen from the Executive Summary Dashboard?
  • CCFR-201b Exam Question 4

    In the Falcon Overwatch Best Practice workflow, at what specific point is a responder encouraged to utilize OSINT (Open Source Intelligence) searches?
  • CCFR-201b Exam Question 5

    A responder is analyzing a MITRE-related alert and sees the technique 'Explore > Discovery > Cloud Service Dashboard'. Which of the following scenarios best describes the technical activity associated with this technique?