Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Free Preparation Discussions
MENU
CrowdStrike Exam CCFH-202 Topic 2 Question 42 Discussion
Actual exam question for
CrowdStrike's
CCFH-202 exam
Question #: 42
Topic #: 2
[All CCFH-202 Questions]
Topic #: 2
What Search page would help a threat hunter differentiate testing, DevOPs, or general user activity from adversary behavior?
Suggested Answer:
D
User Search is a search page that allows a threat hunter to search for user activity across endpoints and correlate it with other events. This can help differentiate testing, DevOPs, or general user activity from adversary behavior by identifying anomalous or suspicious user actions, such as logging into multiple systems, running unusual commands, or accessing sensitive files.
Currently there are no comments in this discussion, be the first to comment!