Exam CCFH-202 All QuestionsBrowse all questions from this exam
Question 8

The Falcon Detections page will attempt to decode Encoded PowerShell Command line parameters when which PowerShell Command line parameter is present?

    Correct Answer: C

    The Falcon Detections page will attempt to decode Encoded PowerShell Command line parameters when the -e parameter is present. This parameter is used to denote that the command fragment following it is encoded.

Discussion

5 comments
examtopics3000Option: C
Aug 4, 2023

Answer C ("-e"). Powershell "-e" indicates that the following command fragment is "encoded".

examtopics3000Option: C
Jul 15, 2023

Isn't the correct answer "-e"?

Jimmy390Option: C
Sep 30, 2023

Answer C ("-e"). Powershell "-e" indicates that the following command fragment is "encoded"

alanalanalanOption: C
Jul 9, 2024

Answer C ("-e"). Powershell "-e" indicates that the following command fragment is "encoded"

silva222222Option: C
May 4, 2024

The Falcon Detections page will attempt to decode encoded PowerShell command line parameters when the parameter present is: C. -e