QUESTION 19
What does the Full Detection Details option provide?

QUESTION 20
In the Hash Search tool, which of the following is listed under Process Executions?

QUESTION 21
When looking at the details of a detection, there are two fields called Global Prevalence and Local Prevalence.
Which answer best defines Local Prevalence?

QUESTION 22
What information does the MITRE ATT&CKFramework provide?

QUESTION 23
What are Event Actions?

QUESTION 24
Which Executive Summary dashboard item indicates sensors running with unsupported versions?

QUESTION 25
You receive an email from a third-party vendor that one of their services is compromised,thevendor names a specific IP address that the compromised service was using. Where would you input this indicator to find any activity related to this IP address?

QUESTION 26
Within the MITRE-Based Falcon Detections Framework, what is the correct way to interpret Keep Access > Persistence > Create Account?

QUESTION 27
When analyzing an executable with a global prevalence of common; but you do not know what the executable is. what is the best course of action?

QUESTION 28
How long are quarantined files stored on the host?

QUESTION 29
The primary purpose for running a Hash Search is to:

QUESTION 30
What does pivoting to an Event Search from a detection do?

QUESTION 31
Which is TRUE regarding a file released from quarantine?

QUESTION 32
How long are quarantined files stored in the CrowdStrike Cloud?

QUESTION 33
Which of the following tactic and technique combinations is sourced from MITRE ATT&CK information?

QUESTION 34
You can jump to a Process Timeline from many views, like a Hash Search, by clicking which of the following?

QUESTION 35
What happens when you create a Sensor Visibility Exclusion for a trusted file path?

QUESTION 36
What action is used when you want to save a prevention hash for later use?

QUESTION 37
The function of Machine Learning Exclusions is to___________.