Question 6 of 60
When you configure and apply an IOA exclusion, what impact does it have on the host and what you see in the console?
Answer

Suggested Answer

The suggested answer is B.

When you configure and apply an IOA exclusion, the associated detection will be suppressed and the associated process would have been allowed to run. This means that the exclusion prevents the detection from appearing in the console while permitting the process to continue its execution on the host.

Community Votes1 vote
BSuggested
100%
Question 7 of 60
What are Event Actions?
Answer

Suggested Answer

The suggested answer is A.

Event Actions are automated searches that can be used to pivot between related events and searches. This allows users to easily navigate from one piece of event data to another related piece, aiding in the investigation and analysis of security events.

Community Votes3 votes
ASuggested
100%
Question 8 of 60
Where are quarantined files stored on Windows hosts?
Answer

Suggested Answer

The suggested answer is B.

Quarantined files are typically stored in a dedicated directory by security software, such as CrowdStrike Falcon. The path Windows\System32\Drivers\CrowdStrike\Quarantine fits this pattern, indicating it is a specific location under the system’s crucial folders for storing quarantined files. This ensures the files are isolated from the rest of the system to prevent any potential harm.

Community Votes1 vote
BSuggested
100%
Question 9 of 60
How long does detection data remain in the CrowdStrike Cloud before purging begins?
Answer

Suggested Answer

The suggested answer is A.

Detection data remains in the CrowdStrike Cloud for 90 days before purging begins. This timeframe allows sufficient time for analysis and review of the detection data while maintaining data storage efficiency.

Community Votes1 vote
ASuggested
100%
Question 10 of 60
What is an advantage of using a Process Timeline?
Answer

Suggested Answer

The suggested answer is A.

A Process Timeline allows users to filter and display specific types of process-related events. This feature helps in narrowing down the events to those of interest, making it easier to analyze and investigate process activities. It aids in effectively managing and visualizing large volumes of process data by focusing on relevant events.

Community Votes3 votes
ASuggested
100%