nerdexam
CrowdStrike

CCFH-202B · Question #52

To find events that are outliers inside a network,___________is the best hunting method to use.

The correct answer is D. stacking. Stacking (Frequency Analysis) is the best hunting method to use to find events that are outliers inside a network. Stacking involves grouping events by a common attribute and counting their frequency, then sorting them by ascending or descending order to identify rare or common…

Threat Hunting Methodology

Question

To find events that are outliers inside a network,___________is the best hunting method to use.

Options

  • Atime-based
  • Bmachine learning
  • Csearching
  • Dstacking

How the community answered

(41 responses)
  • A
    2% (1)
  • B
    2% (1)
  • C
    2% (1)
  • D
    93% (38)

Explanation

Stacking (Frequency Analysis) is the best hunting method to use to find events that are outliers inside a network. Stacking involves grouping events by a common attribute and counting their frequency, then sorting them by ascending or descending order to identify rare or common events. This can help find anomalies or deviations from normal behavior that could indicate malicious activity. Time- based searching, machine learning, and searching are not specific hunting methods to find outliers.

Topics

#outlier detection#stacking#hunting methods#frequency analysis

Community Discussion

No community discussion yet for this question.

Full CCFH-202B Practice