QUESTION 26
How does a DNSRequest event link to its responsible process?

QUESTION 27
From a detection, what is the fastest way to see children and sibling process information?

QUESTION 28
Which of the following is returned from the IP Search tool?

QUESTION 29
Which is TRUE regarding a file released from quarantine?

QUESTION 30
What does pivoting to an Event Search from a detection do?

QUESTION 31
Where are quarantined files stored on Windows hosts?

QUESTION 32
Which of the following is an example of a MITRE ATT&CK tactic?

QUESTION 33
What is an advantage of using a Process Timeline?

QUESTION 34
Which Executive Summary dashboard item indicates sensors running with unsupported versions?

QUESTION 35
What types of events are returned by a Process Timeline?

QUESTION 36
You notice that taskeng.exe is one of the processes involved in a detection. What activity should you investigate next?

QUESTION 37
How are processes on the same plane ordered (bottom ‘VMTOOLSD.EXE’ to top CMD.EXE’)?

QUESTION 38
What happens when a quarantined file is released?

QUESTION 39
What do IOA exclusions help you achieve?

QUESTION 40
When you configure and apply an IOA exclusion, what impact does it have on the host and what you see in the console?

QUESTION 41
How long are quarantined files stored on the host?

QUESTION 42
You are notified by a third-party that a program may have redirected traffic to a malicious domain. Which Falcon page will assist you in searching for any domain request information related to this notice?

QUESTION 43
After pivoting to an event search from a detection, you locate the ProcessRollup2 event. Which two field values are you required to obtain to perform a Process Timeline search so you can determine what the process was doing?

QUESTION 44
Aside from a Process Timeline or Event Search, how do you export process event data from a detection in
.CSV format?