Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

CrowdStrike Exam CCFH-202 Topic 10 Question 23 Discussion

Actual exam question for CrowdStrike's CCFH-202 exam
Question #: 23
Topic #: 10
[All CCFH-202 Questions]

You are reviewing a list of domains recently banned by your organization's acceptable use policy. In particular, you are looking for the number of hosts that have visited each domain. Which tool should you use in Falcon?

Show Suggested Answer Hide Answer
Suggested Answer: D

This is the correct answer for the same reason as above. The Mac Sensor report provides a comprehensive view of activities occurring on Mac hosts, including items of interest that may be hunting or investigation leads. It does not display a listing of all Mac hosts with or without a Falcon sensor installed, nor does it provide a detection focused view of known malicious activities occurring on Mac hosts.


Contribute your Thoughts:

Justine
3 months ago
This is a tricky one, but I think the Allowed Domain Summary Report is the way to go. It's the most direct tool for the job.
upvoted 0 times
...
Teddy
3 months ago
Hmm, I'm not sure. I think I might try the IP Addresses Search first, just to see if I can get a more granular look at the specific hosts that have been accessing these domains.
upvoted 0 times
Vanna
2 months ago
Creating a custom alert for each domain could also be a good option to track activity.
upvoted 0 times
...
Elina
2 months ago
I would go with the Allowed Domain Summary Report to get a quick overview.
upvoted 0 times
...
Sina
2 months ago
I think the Bulk Domain Search might be more helpful in this case.
upvoted 0 times
...
...
Shoshana
3 months ago
I bet the Falcon team had a good laugh when they named that 'Bulk Domain Search' option. It sounds like something straight out of a 90s hacker movie.
upvoted 0 times
Colton
2 months ago
C) Bulk Domain Search
upvoted 0 times
...
Malcolm
3 months ago
B) Allowed Domain Summary Report
upvoted 0 times
...
Ressie
3 months ago
A) Create a custom alert for each domain
upvoted 0 times
...
...
Ruth
4 months ago
I wonder if there's a way to automate this process, like with a custom alert. That would really streamline things.
upvoted 0 times
Veronika
2 months ago
D) IP Addresses Search
upvoted 0 times
...
Gerald
3 months ago
C) Bulk Domain Search
upvoted 0 times
...
Derick
3 months ago
B) Allowed Domain Summary Report
upvoted 0 times
...
Carisa
3 months ago
A) Create a custom alert for each domain
upvoted 0 times
...
...
Celestine
4 months ago
I prefer creating a custom alert for each domain. It allows us to monitor specific domains more closely.
upvoted 0 times
...
Elke
4 months ago
I agree with Gilma. Bulk Domain Search would be the most efficient tool for this task.
upvoted 0 times
...
Gilma
4 months ago
I think we should use Bulk Domain Search to find the number of hosts that have visited each domain.
upvoted 0 times
...

Save Cancel