5.3 Leverage the Events Reference (Events Data Dictionary) Documentation to Learn Information About Specific Events CCFH Practice Questions (Page 5)

Questions 21–22

1. 21application · medium

   A Falcon Hunter is new to the platform and wants to learn about the different event types available. They have been told to use the Events Reference but cannot find it in the console. What is the most likely reason?

   • AThe Events Reference is only accessible via the API.
   • BThe Events Reference is only available in the mobile app.
   • CThe Events Reference is only available to users with a specific role.
   • DThey are looking in the wrong section; the Events Reference is under 'Documentation' or 'Support'.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   A threat hunter wants to look up the event with the ID 'Event_ExternalApiEvent' in the Events Reference. What is the correct way to search for this event?

   • AOpen the Falcon API documentation and search for the event ID.
   • BNavigate to the 'Event Types' section in the Falcon console's Settings menu.
   • CEnter 'Event_ExternalApiEvent' in the search bar of the Events Reference.
   • DUse the Falcon Query Language (FQL) search in the Investigate module to find the event ID.
   Reveal Solution Discussion Select an answer first