Examice

Exam CCFA All QuestionsBrowse all questions from this exam

Question 65

You need to export a list of all detections for a specific Host Name in the last 24 hours. What is the best way to do this?

Go to Host Management in the Host page. Select the host and use the Export Detections button

Utilize the Detection Resolution Dashboard. Use the filters to focus on the appropriate hostname and time, then export the results from the "Detection Resolution History" section

In the Investigate module, access the Detection Activity page. Use the filters to focus on the appropriate hostname and time, then export the results

Utilize the Detection Activity Dashboard. Use the filters to focus on the appropriate hostname and time, then export the results from the "Detections by Host" section

Correct Answer: C

The best way to export a list of all detections for a specific Host Name in the last 24 hours is by using the filters in the Investigate module on the Detection Activity page. Once you have filtered the results to focus on the appropriate hostname and time, you can then export the relevant detections.

Discussion

sbag0024Option: C

C is correct, tested in UI

LaCubanitaOption: C

Correct answer is C, option to export is at the end of the Detection activity page (towards the right) when you hover over one of the rows, you will then see the tiny download arrow

FerbOPOption: C

C is correct

testmailucOption: C

C is correct. Verified through the console

Jek88Option: C

C is the correct answer.