Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

CrowdStrike CCFR-201b Exam - Topic 2 Question 11 Discussion

What does the Full Detection Details option provide?
A) It provides a visualization of program ancestry via the Process Tree View
B) It provides a visualization of program ancestry via the Process Activity View
C) It provides detailed list of detection events via the Process Table View
D) It provides a detailed list of detection events via the Process Tree View

CrowdStrike CCFR-201b Exam - Topic 2 Question 11 Discussion

Actual exam question for CrowdStrike's CCFR-201b exam
Question #: 11
Topic #: 2
[All CCFR-201b Questions]

What does the Full Detection Details option provide?

Show Suggested Answer Hide Answer
Suggested Answer: A

According to the CrowdStrike Falcon Devices Add-on for Splunk Installation and Configuration Guide v3.1.5+, the Full Detection Details option allows you to view detailed information about a detection, such as detection ID, severity, tactic, technique, description, etc1.You can also view the events generated by the processes involved in the detection in different ways, such as process tree, process timeline, or process activity1.The process tree view provides a visualization of program ancestry, which shows the parent-child and sibling relationships among the processes1.You can also see the event types and timestamps for each process1.


Contribute your Thoughts:

0/2000 characters
Lanie
2 days ago
I feel like the Process Activity View was mentioned in our study materials, so maybe it’s B? But I could be mixing it up with another topic.
upvoted 0 times
...
Vernell
7 days ago
I remember practicing a question similar to this, and I think it was about how detection events are displayed. It could be C, but I’m not confident.
upvoted 0 times
...
Keneth
12 days ago
I think the Full Detection Details option might be related to the Process Tree View, but I'm not entirely sure if it's A or D.
upvoted 0 times
...

Save Cancel