CrowdStrike
CCFH-202B · Question #32
When performing a raw event search via the Events search page, what are Event Actions?
Sign in or unlock CCFH-202B to reveal the answer and full explanation for question #32. The question stem and answer options stay visible for context.
Falcon Investigate Tools
Question
When performing a raw event search via the Events search page, what are Event Actions?
Options
- AEvent Actions contains an audit information log of actions an analyst took in regards to a specific
- BEvent Actions contains the summary of actions taken by the Falcon sensor such as quarantining
- CEvent Actions are pivotable workflows including connecting to a host, pre-made event searches
- DEvent Actions is the field name that contains the event name defined in the Events Data
Unlock CCFH-202B to see the answer
You've previewed enough free CCFH-202B questions. Unlock CCFH-202B for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Event Search#Event Actions#pivotable workflows#raw event search