Online Access Free CrowdStrike.CCFR-201b.v2026-02-16.q90 Practice Test (Page 6)

CCFR-201b Exam Question 21

Which statement is TRUE regarding the "Bulk Domains" search?

A.You should only pivot to the "Bulk Domains" search tool after completing an investigation

B.The "Bulk Domains" search will show IP address and port information for any associated connections

C.The "Bulk Domains" search will allow you to blocklist your queried domains

D.It will show a list of computers and process that performed a lookup of any of the domains in your search

CCFR-201b Exam Question 22

A responder is focused on a specific malicious script and wants to see everything that the script's process did.
Which timeline is the best tool for this task?

A.User Timeline

B.Host Timeline

C.Administrative Timeline

D.Process Timeline

CCFR-201b Exam Question 23

When training a new team member on how to interpret Falcon telemetry, a senior responder explains the definition of a 'Tactic'. Which of the following sentences best captures the technical definition of a Tactic in this context?

A.It represents the specific software version or exploit code used to crash a service.

B.It is the adversary's tactical goal: the fundamental reason for performing a specific action.

C.It is the unique cryptographic hash associated with a malicious file discovered on disk.

D.It is the specific command-line string used to execute a PowerShell script.

CCFR-201b Exam Question 24

When performing a 'Hash Search', which of the following is NOT a filter available for use?

A.SHA256

B.Filename

C.MD5

D.File Type

CCFR-201b Exam Question 25

When reviewing the data within a process timeline, what specific type of information is being displayed to the responder?

A.All cloudable process-related events (files written, network connections, etc.) for that process in a given timeframe.

B.A list of every user who has ever logged into that specific endpoint.

C.A capture of all raw network packets sent by the process.

D.A summary of the hardware performance metrics during the time of the detection.

Latest Upload: 153PECB.ISO-IEC-27002-Foundation.v2026-10-21.q32; 292Cisco.300-415.v2026-10-21.q228; 182Fortinet.NSE5_FSW_AD-7.6.v2026-10-20.q51; 233EC-COUNCIL.212-89.v2026-10-20.q204; 349EC-COUNCIL.312-50.v2026-10-20.q421; 170Oracle.1Z0-931-26.v2026-10-19.q61; 165Microsoft.AI-200.v2026-10-19.q43; 163Oracle.1z0-1195-26.v2026-10-19.q23; 318Microsoft.MS-102.v2026-10-19.q259; 424ECCouncil.312-50v13.v2026-10-19.q453

CCFR-201b Exam Question 21

CCFR-201b Exam Question 22

CCFR-201b Exam Question 23

CCFR-201b Exam Question 24

CCFR-201b Exam Question 25

Download PDF File