4.8 Create a Custom Dashboard to Display Advanced Event Search Results CCFH Practice Questions (Page 3)

Questions 11–13

1. 11application · medium

   A Falcon administrator is creating a dashboard to display the number of detections by tactic, based on an Advanced Event Search query. They want the dashboard to show a visual representation of the data, such as a bar chart. What is the correct way to configure the widget to achieve this?

   • AAdd a widget, select the saved Advanced Event Search query, and then choose the 'Bar Chart' visualization type.
   • BAdd a widget, paste the query directly, and the widget will automatically display a bar chart.
   • CCreate a new dashboard and use the 'Chart' panel type, then paste the query into the panel.
   • DUse the 'Visualize' button in Advanced Event Search to generate a chart and then add it to the dashboard.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What does the layout configuration of a custom dashboard control?

   • AThe color scheme of the Falcon console
   • BThe list of users who can edit the dashboard
   • CThe arrangement and size of widgets on the dashboard
   • DThe time zone used for all event timestamps
   Reveal Solution Discussion Select an answer first
3. 13application · medium

   A security analyst has created a custom dashboard with a widget that displays the top 5 file names associated with malware detections. The analyst wants to change the widget to display the top 10 file names instead. What is the most efficient way to make this change?

   • AEdit the widget's query to include 'limit:10' and save the widget.
   • BDelete the widget and create a new one with the updated query.
   • CAdjust the dashboard's refresh interval to update the data more frequently.
   • DChange the widget's visualization type to 'Table' to show more rows.
   Reveal Solution Discussion Select an answer first