PDF File

Latest CrowdStrike CCFR-201b Practice Questions BY Clay

Question 1

What happens when you create a Sensor Visibility Exclusion for a trusted file path?

  • A. It excludes host information from Detections and Incidents generated within that file path location
  • B. It prevents file uploads to the CrowdStrike cloud from that file path
  • C. It excludes sensor monitoring and event collection for the trusted file path
  • D. It disables detection generation from that path, however the sensor can still perform prevention actions
Question 2

From a detection, what is the fastest way to see children and sibling process information?

  • A. Select the Event Search option. Then from the Event Actions, select Show Associated Event Data (From TargetProcessld_decimal)
  • B. Select Full Detection Details from the detection
  • C. Right-click the process and select "Follow Process Chain"
  • D. Select the Process Timeline feature, enter the AID. Target Process ID, and Parent Process ID