Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

CrowdStrike CCFR-201b Exam - Topic 1 Question 15 Discussion

You are notified by a third-party that a program may have redirected traffic to a malicious domain. Which Falcon page will assist you in searching for any domain request information related to this notice?
B) Investigate
A) Falcon X
C) Discover
D) Spotlight

CrowdStrike CCFR-201b Exam - Topic 1 Question 15 Discussion

Actual exam question for CrowdStrike's CCFR-201b exam
Question #: 15
Topic #: 1
[All CCFR-201b Questions]

You are notified by a third-party that a program may have redirected traffic to a malicious domain. Which Falcon page will assist you in searching for any domain request information related to this notice?

Show Suggested Answer Hide Answer
Suggested Answer: B

According to the [CrowdStrike website], the Investigate page is where you can search for and analyze various types of data collected by the Falcon platform, such as events, hosts, processes, hashes, domains, IPs, etc1.You can use various tools, such as Event Search, Host Search, Process Timeline, Hash Search, Bulk Domain Search, etc., to perform different types of searches and view the results in different ways1.If you want to search for any domain request information related to a notice from a third-party, you can use the Investigate page to do so1.For example, you can use the Bulk Domain Search tool to search for the malicious domain and see which hosts and processes communicated with it1.You can also use the Event Search tool to search for DNSRequest events that contain the malicious domain and see more details about the query and response1.


Contribute your Thoughts:

0/2000 characters
Gail
4 days ago
Sounds a bit off, I thought Falcon X had more info on domains.
upvoted 0 times
...
Dortha
9 days ago
Wait, are you sure it's not D) Spotlight?
upvoted 0 times
...
Essie
14 days ago
B) Investigate is the right choice, no doubt!
upvoted 0 times
...
Delsie
19 days ago
I thought it was A) Falcon X?
upvoted 0 times
...
Tomas
24 days ago
Definitely B) Investigate for that!
upvoted 0 times
...
Darell
30 days ago
I want to say C) Discover, but I can't recall exactly what that page does. This is tricky!
upvoted 0 times
...
Callie
1 month ago
I feel like we practiced a similar question, and I chose D) Spotlight for domain-related searches. But now I'm second-guessing myself.
upvoted 0 times
...
Willard
1 month ago
I'm not entirely sure, but I remember something about Falcon X being used for threat intelligence. Could it be A)?
upvoted 0 times
...
Mauricio
2 months ago
I think the answer might be B) Investigate, since it sounds like the right place to look for traffic redirection issues.
upvoted 0 times
...

Save Cancel