Exam CCFR-201b Topic 4 Question 169 Discussion

Actual exam question for CrowdStrike's CCFR-201b exam
Question #: 169
Topic #: 4
A responder is analyzing a process tree where a suspicious executable is listed as a direct child of services.
exe. In this scenario, which source is most likely responsible for the execution?

Suggested Answer: B Vote an answer

by Louise at Jun 23, 2026, 08:14 PM

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

0
0
0
10