Exam CCFR-201 All QuestionsBrowse all questions from this exam
Question 39

After running an Event Search, you can select many Event Actions depending on your results. Which of the following is NOT an option for any Event Action?

    Correct Answer: A

    Drawing a Process Explorer is not an option among the standard actions available after running an Event Search. The other options are valid actions that can be performed, such as showing a window of events, displaying a process timeline, and displaying associated event data.

Discussion
ChiquitabanditaOption: C

i change my vote to C show a process timeline for the responsible process is NOT an option. what makes very picky question/answer is that there is an option: Show responsible Process Data ~ listed answer Show a process timeline for rhe responsible process ??? CrowdStrike documentation is really poor and these questions do not match up to the questions. i got the info from 201m detection triage

alanalanalanOption: C

answer is C, C. Show a Process Timeline for the responsible process the question is asking "NOT". It cannot show the timeline, it show the log one by one, but it can show all the process detail and the related information

kangaruOption: C

The real statement is: "View Process Explorer for the responsible process"

sbag0024Option: C

C is the answer. This is not an option in the Event Actions drop-down. The others do show in the drop-down.

lightmagentaOption: A

correct answer is A

ChiquitabanditaOption: A

the others are real event actions