Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

CrowdStrike CCFR-201b Exam - Topic 6 Question 16 Discussion

Which of the following is returned from the IP Search tool?
A) IP Summary information from Falcon events containing the given IP
B) Threat Graph Data for the given IP from Falcon sensors
C) Unmanaged host data from system ARP tables for the given IP D. IP Detection Summary information for detection events containing the given IP

CrowdStrike CCFR-201b Exam - Topic 6 Question 16 Discussion

Actual exam question for CrowdStrike's CCFR-201b exam
Question #: 16
Topic #: 6
[All CCFR-201b Questions]

Which of the following is returned from the IP Search tool?

Show Suggested Answer Hide Answer
Suggested Answer: A

According to theCrowdStrike Falcon Devices Add-on for Splunk Installation and Configuration Guide v3.1.5+, the IP Search tool allows you to search for an IP address and view a summary of information from Falcon events that contain that IP address1.The summary includes the hostname, sensor ID, OS, country, city, ISP, ASN, and geolocation of the host that communicated with that IP address1.


Contribute your Thoughts:

0/2000 characters

Currently there are no comments in this discussion, be the first to comment!


Save Cancel