CrowdStrike CCFH-202 Actual Free Exam Questions & Community Discussion
Which of the following is an example of actor actions during the RECONNAISSANCE phase of the Cyber Kill Chain?
Correct Answer: A
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
In which of the following stages of the Cyber Kill Chain does the actor not interact with the victim endpoint(s)?
Correct Answer: C
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
What information is provided when using IP Search to look up an IP address?
Correct Answer: B
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
Which tool allows a threat hunter to populate and colorize all known adversary techniques in a single view?
Correct Answer: C
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
Refer to Exhibit.
What type of attack would this process tree indicate?
What type of attack would this process tree indicate?
Correct Answer: A
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
The Events Data Dictionary found in the Falcon documentation is useful for writing hunting queries because:
Correct Answer: D
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
SPL (Splunk) eval statements can be used to convert Unix times (Epoch) into UTC readable time Which eval function is correct^
Correct Answer: C
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
0
0
0
10