Analyze Detection Information CCFR Practice Questions (Page 7)

Questions 31–33

1. 31foundation · easy

   Why is the 'User' column in the View As Process Table important for analysis?

   • AIt shows the process's file hash
   • BIt shows the process's network connections
   • CIt shows the process's parent process
   • DIt helps identify which account was used to run the process
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   In the View As Process Table, which of the following details is typically displayed for each process?

   • AThe detection's severity
   • BCommand line arguments
   • CThe host's IP address
   • DThe Falcon sensor version
   Reveal Solution Discussion Select an answer first
3. 33foundation · easy

   After analyzing a detection, a Falcon Responder determines that the activity is malicious and requires immediate action. What is the recommended course of action in Falcon?

   • ADelete the detection from the console
   • BContain the affected host
   • CAdd the detection to a watchlist
   • DMark the detection as a false positive
   Reveal Solution Discussion Select an answer first