Which ID in Endpoint St standard is associated with one specific action, involves up to three different hashes (Parent, Process, Target), and occurs on a single device at a specific time?

The correct answer is D. Event ID. See the full explanation below for the reasoning.

Question

Which ID in Endpoint St standard is associated with one specific action, involves up to three different hashes (Parent, Process, Target), and occurs on a single device at a specific time?

Options

AThreat ID
BProcess ID
CAlert ID
DEvent ID

How the community answered

(30 responses)

A
7% (2)
B
10% (3)
C
3% (1)
D
80% (24)

Community Discussion

No community discussion yet for this question.

Full 5V0-91.20 Practice