MENU
What kind of activity does a User Search help you investigate?
Suggested Answer: B
Get Premium CCFH-202b Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
User Search is an Investigate tool that helps you investigate a list of process activity executed by the specified user account. It shows information such as process name, command line, parent process name, parent command line, etc. for each process that was executed by the user account on any host in your environment. It does not show a history of Falcon UI logon activity, a count of failed user logon activity, or a list of DNS queries by the specified user account.
27 comments · newest first
VA
Val
4 days ago
I think it's about logon activity.
NA
Nakita
9 days ago
I prefer A) for user behavior insights.
AL
Alita
14 days ago
D) DNS queries? Not sure that's relevant.
YO
Yolando
20 days ago
C) failed logons show security issues.
CO
Cornell
25 days ago
B) could be useful too, process details.
AM
Amina
30 days ago
A) makes sense, tracking access.
CA
Cassandra
1 month ago
I think it's about logon activity.
ME
Merilyn
1 month ago
I feel A) gives the best overview.
CE
Cecily
2 months ago
D) DNS queries? Not my first choice.
VA
Vallie
2 months ago
C) failed logons show security issues.
BE
Beckie
2 months ago
B) could be useful too, process tracking.
ST
Stephaine
2 months ago
A) seems right, history is crucial.
HE
Herminia
2 months ago
I think it’s about logon activity.
GW
Gwenn
2 months ago
Wait, does it really track DNS queries too? That’s surprising!
HU
Huey
3 months ago
Nah, it’s mostly about failed logon attempts, right?
DO
Dominque
3 months ago
I thought it was just for logon history, but I guess it covers more.
SH
Shaniqua
3 months ago
Totally agree, it's super useful for tracking what users are doing!
LA
Lavonda
3 months ago
A User Search shows process activity for a user account.
BO
Bobbye
3 months ago
I agree, it’s all about user account activity.
MO
Mose
3 months ago
Wait, can it really track DNS queries? That’s wild!
LE
Leota
4 months ago
A count of failed logins is super useful too!
AD
Adell
4 months ago
I thought it was just for process activity?
DA
Dalene
4 months ago
Definitely helps with logon activity history!
OD
Odette
4 months ago
I feel like DNS queries by a user account might be part of it, but I can't recall if that's what a User Search focuses on.
MA
Martin
4 months ago
I'm a bit confused; could a User Search also show failed logon attempts? That seems relevant too.
KA
Katy
4 months ago
I remember practicing a question similar to this, and I think it was about process activity related to user accounts.
MI
Micah
6 months ago
I think a User Search might help with tracking logon activity, but I'm not entirely sure if it's just for Falcon Ul.