CCFR-201 Exam QuestionsBrowse all questions from this exam

CCFR-201 Exam - Question 2


When reviewing a Host Timeline, which of the following filters is available?

Show Answer
Correct Answer: B

When reviewing a Host Timeline, filtering by Event Types is a common feature. This allows users to focus on specific kinds of events, such as login attempts, malware detections, or configuration changes, which are essential for detailed security analysis and monitoring.

Discussion

2 comments
Sign in to comment
dh2414Option: B
Nov 15, 2023

Event Types is present in host timeline

sbag0024Option: B
Jan 31, 2024

B is the answer. Your options in the Host Timeline are Hostname, Agent ID, Event Types, Company, and Timeline.