4.7 Convert and Format Unix Times to UTC Readable Time CCFH Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A Falcon Hunter is comparing event times from Falcon with logs from a system that records timestamps in ISO 8601 format with a timezone offset, such as `2024-04-05T14:30:00+02:00`. The hunter's Falcon console is set to UTC. What is the correct way to compare these timestamps?

   • AIgnore the timezone offset in the ISO 8601 timestamp and compare the date-time portion directly.
   • BCompare the ISO 8601 string directly to the Falcon console-displayed time.
   • CSubtract 2 hours from the ISO 8601 timestamp to convert it to UTC, then compare to the Falcon display.
   • DConvert the ISO 8601 timestamp to Unix epoch seconds and compare it to the Falcon event's epoch value.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   In Python, which function can convert a Unix timestamp to a UTC `datetime` object?

   • A`datetime.fromtimestamp(timestamp)`
   • B`datetime.now(timestamp)`
   • C`datetime.utcfromtimestamp(timestamp)`
   • D`time.strftime(timestamp)`
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A Falcon Hunter is collaborating with an analyst in London (UTC+0) and another in Sydney (UTC+11). They are reviewing the same event and need to agree on the time. The London analyst sees the event at `10:00`. What time does the Sydney analyst see, assuming both consoles are set to their local timezones?

   • A10:00 the same day.
   • B09:00 the same day.
   • C21:00 the same day.
   • D23:00 the previous day.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which of the following methods can be used to convert a Unix timestamp to a UTC readable time string?

   • AUse the `format` command in a Linux shell
   • BUse the `time` command in a Linux shell
   • CUse the `timestamp` command in a Windows command prompt
   • DUse the `date -u -d @<timestamp>` command in a Linux shell
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Why is it important to convert Unix timestamps to UTC rather than a local time zone when analyzing security events?

   • AUTC is the time zone used by all security tools by default
   • BUTC ensures that events from different geographic locations can be compared on a consistent timeline
   • CUTC is the only time zone that is accurate to the second
   • DLocal time zones are always incorrect for security analysis
   Reveal Solution Discussion Select an answer first