CrowdStrike
CCFH-202B · Question #36
CCFH-202B Question #36: Real Exam Question with Answer & Explanation
Sign in or unlock CCFH-202B to reveal the answer and full explanation for question #36. The question stem and answer options stay visible for context.
Question
Which of the following is a suspicious process behavior?
Options
- APowerShell running an execution policy of RemoteSigned
- BAn Internet browser (eg, Internet Explorer) performing multiple DNS requests
- CPowerShell launching a PowerShell script
- DNon-network processes (eg, notepad exe) making an outbound network connection
Unlock CCFH-202B to see the answer
You've previewed enough free CCFH-202B questions. Unlock CCFH-202B for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.