MENU
What elements are required to properly execute a Process Timeline?
Suggested Answer: A
Get Premium CCFH-202b Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
The Agent ID (AID) and the Target Process ID are the elements that are required to properly execute a Process Timeline. The Agent ID (AID) is a unique identifier for each host that has a Falcon sensor installed. The Target Process ID is the decimal representation of the process identifier for the process that you want to investigate. These two elements are used to query the cloud for the events related to the process on the host. The Agent ID (AID) only, the Hostname and Local Process ID, and the Target Process ID only are not sufficient to execute a Process Timeline.
12 comments · newest first
GI
Giovanna
2 months ago
C makes sense too, but we need AID for tracking.
GA
Gail
2 months ago
I feel like B is too limited. AID alone won't work.
FR
Franchesca
3 months ago
I think A is the best choice. Both IDs are crucial.
CH
Chi
3 months ago
Hostname and Local Process ID? That's a new one for me!
AU
Audry
3 months ago
Wait, can you really do it with just AID? Sounds off.
GE
Gerald
3 months ago
Definitely need both AID and Target Process ID!
LO
Lon
3 months ago
I think AID alone is enough, right?
BE
Belen
3 months ago
AID and Target Process ID are essential!
SH
Shanda
4 months ago
I’m really uncertain here. I thought maybe just the Agent ID was enough, but now I’m second-guessing myself.
NE
Nelida
4 months ago
I feel like we had a practice question similar to this, and it emphasized the need for both IDs. A seems right to me.
KI
Kiley
4 months ago
I’m not entirely sure, but I remember something about needing the Hostname for some processes. Could it be C?
MI
Michel
4 months ago
I think we discussed the importance of both Agent ID and Target Process ID in class, so I’m leaning towards A.