Pre-Winter Sale Special - Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: sntaclus

examout.co

The function of Machine Learning Exclusions is to___________.

A.

stop all detections for a specific pattern ID

B.

stop all sensor data collection for the matching path(s)

C.

Stop all Machine Learning Preventions but a detection will still be generated and files will still be uploaded to the CrowdStrike Cloud

D.

stop all ML-based detections and preventions for the matching path(s) and/or stop files from being uploaded to the CrowdStrike Cloud

What types of events are returned by a Process Timeline?

A.

Only detection events

B.

All cloudable events

C.

Only process events

D.

Only network events

By default, when a file is quarantined by the Falcon sensor to prevent execution, how many days does that file remain on the host ' s local disk?

A.

7 days

B.

14 days

C.

30 days

D.

90 days

While in an Event Search, a responder clicks on an event action. What does the ' Show Child Processes ' event action do?

A.

It displays a list of children in a new graphical tree.

B.

It generates a new Event Search based on the specific Event Action and Parent PID.

C.

It automatically terminates all children of that process on the endpoint.

D.

It pivots to the Host Search for the machine where the process ran.

The Falcon sensor can automatically upload quarantined files to the CrowdStrike Cloud for further analysis. What is the maximum size allowed for a quarantined file to be uploaded?

A.

10MB

B.

32MB

C.

64MB

D.

128MB

CrowdStrike provides ' Overwatch Best Practices ' for triaging alerts. According to these guidelines, what is the next step a responder should take immediately after the ' Understand the detection ' step?

A.

Isolate the host from the network.

B.

Review the process tree to understand the origin of the activity.

C.

Perform an OSINT search for the suspicious hash.

D.

Resolve the detection as a True Positive.

What happens when you create a Sensor Visibility Exclusion for a trusted file path?

A.

It excludes host information from Detections and Incidents generated within that file path location

B.

It prevents file uploads to the CrowdStrike cloud from that file path

C.

It excludes sensor monitoring and event collection for the trusted file path

D.

It disables detection generation from that path, however the sensor can still perform prevention actions

How long does detection data remain in the CrowdStrike Cloud before purging begins?

A.

90 Days

B.

45 Days

C.

30 Days

D.

14 Days

Host Search is a powerful investigation tool. From which of the following sources is a responder most likely to pivot directly to a Host Search?

A.

A global intelligence report about a new adversary.

B.

A specific detection that occurred on a particular host.

C.

The main settings menu of the Falcon console.

D.

The help documentation in the Support portal.

When you configure and apply an IOA exclusion, what impact does it have on the host and what you see in the console?

A.

The process specified is not sent to the Falcon Sandbox for analysis

B.

The associated detection will be suppressed and the associated process would have been allowed to run

C.

The sensor will stop sending events from the process specified in the regex pattern

D.

The associated IOA will still generate a detection but the associated process would have been allowed to run