최신CrowdStrike Certified Falcon Hunter - CCFH-202b무료샘플문제

A. The Hash Search is available on Linux

B. Module Load History is not presented in a Hash Search

C. Wildcard searches are not permitted with the Hash Search

D. The Hash Search provides Process Execution History

A. The Mac Sensor report provides a detection focused view of known malicious activities occurring on Mac hosts, including machine-learning and indicator-based detections

B. The Mac Sensor report provides a comprehensive view of activities occurring on Mac hosts, including items of interest that may be hunting or investigation leads

C. The Mac Sensor report displays a listing of all Mac hosts without a Falcon sensor installed

D. The Mac Sensor report displays a listing of all Mac hosts with a Falcon sensor installed

A. By using the "renamed" keyword after the field name eg "stats count renamed totalcount by ComputerName"

B. By renaming the fields with the "rename" command after the transforming command e.g. "stats count by ComputerName | rename count AS total_count"

C. By specifying the desired name after the field name eg "stats count totalcount by ComputerName"

D. You cannot rename fields as it would affect sub-queries and statistical analysis

A. time

B. conv_time

C. utc_time

D. _time

A. Prevention Policies

B. Processes and Services

C. Quarantined Files

D. Intel Reports

A. A count of failed user logon activity

B. A list of process activity executed by the specified user account

C. A history of Falcon Ul logon activity

D. A list of DNS queries by the specified user account

A. Impact and Collection

B. Persistence and Execution

C. Reconnaissance and Resource Development

D. Privilege Escalation and Initial Access