nerdexam
CrowdStrike

CCCS-203B · Question #57

A security analyst using CrowdStrike Falcon Cloud Workload Protection (CWP) notices unusual outbound traffic from a Kubernetes pod to an unknown external IP. The analyst needs to determine whether the

Sign in or unlock CCCS-203B to reveal the answer and full explanation for question #57. The question stem and answer options stay visible for context.

Cloud Workload Protection

Question

A security analyst using CrowdStrike Falcon Cloud Workload Protection (CWP) notices unusual outbound traffic from a Kubernetes pod to an unknown external IP. The analyst needs to determine whether the traffic is malicious and identify the process responsible for the connection. Which CrowdStrike Falcon feature should the analyst use to identify network connections at the process level?

Options

  • AFalcon LogScale
  • BFalcon Identity Protection
  • CFalcon Sensor Network Visibility
  • DFalcon Sandbox

Unlock CCCS-203B to see the answer

You've previewed enough free CCCS-203B questions. Unlock CCCS-203B for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#Falcon Sensor network visibility#Kubernetes pod traffic#process-level monitoring#cloud workload protection
Full CCCS-203B Practice