CCFR-201 Exam QuestionsBrowse all questions from this exam

CCFR-201 Exam - Question 39


After running an Event Search, you can select many Event Actions depending on your results. Which of the following is NOT an option for any Event Action?

Show Answer
Correct Answer: AC

Drawing a Process Explorer is not an option among the standard actions available after running an Event Search. The other options are valid actions that can be performed, such as showing a window of events, displaying a process timeline, and displaying associated event data.

Discussion

6 comments
Sign in to comment
ChiquitabanditaOption: C
Dec 11, 2023

i change my vote to C show a process timeline for the responsible process is NOT an option. what makes very picky question/answer is that there is an option: Show responsible Process Data ~ listed answer Show a process timeline for rhe responsible process ??? CrowdStrike documentation is really poor and these questions do not match up to the questions. i got the info from 201m detection triage

ChiquitabanditaOption: A
Dec 10, 2023

the others are real event actions

lightmagentaOption: A
Dec 12, 2023

correct answer is A

sbag0024Option: C
Jan 30, 2024

C is the answer. This is not an option in the Event Actions drop-down. The others do show in the drop-down.

kangaruOption: C
Feb 11, 2024

The real statement is: "View Process Explorer for the responsible process"

alanalanalanOption: C
May 21, 2024

answer is C, C. Show a Process Timeline for the responsible process the question is asking "NOT". It cannot show the timeline, it show the log one by one, but it can show all the process detail and the related information