Which of the following is a category of event that can appear in the Hosts Timeline?

Email delivery status notifications from the mail server

Firewall rule changes on the perimeter gateway

DNS query logs from the corporate DNS server

An analyst opens a Hosts Timeline and sees entries for 'FileWrite', 'NetworkConnection', and 'UserLogon'. What do these entries represent?

Different severity levels of a single detection

Different stages of the Falcon sensor's installation process

Different categories of events that the timeline aggregates for the host

Different hosts that reported to the same sensor

CrowdStrikeCertified Falcon Responder (CCFR)

Domain 4Objective 2

Explain What Information a Hosts Timeline Will Provide CCFR Practice Questions (Page 6)

Part of the Event Investigation domain, which makes up ~14% of our current practice bank.

27questions here

6free pages

6concepts

Questions 26–27

26foundation · easy
Which of the following is a category of event that can appear in the Hosts Timeline?
Select an answer first
27foundation · easy
An analyst opens a Hosts Timeline and sees entries for 'FileWrite', 'NetworkConnection', and 'UserLogon'. What do these entries represent?
Select an answer first

Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CCFR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CrowdStrike. “CCFR” is a trademark of its owner, used for identification only.

Explain What Information a Hosts Timeline Will Provide CCFR Practice Questions (Page 6)

Questions 26–27

Which of the following is a category of event that can appear in the Hosts Timeline?

An analyst opens a Hosts Timeline and sees entries for 'FileWrite', 'NetworkConnection', and 'UserLogon'. What do these entries represent?

Keep studying — Event Investigation