CrowdStrike
CCFH-202B · Question #76
When reviewing a DNS request in the Event Search, you're curious which process made the request. Which Event Action would be the quickest way to show you the process?
The correct answer is C. Show Responsible Process Data. You've hit your limit · resets 12:50am (America/New_York)
Event Search and Query Construction
Question
When reviewing a DNS request in the Event Search, you're curious which process made the request. Which Event Action would be the quickest way to show you the process?
Options
- AShow Associated Event Data (from TargetProcessID_decimal)
- BShow Parent Process
- CShow Responsible Process Data
- DPivot - Host Search
How the community answered
(59 responses)- A7% (4)
- B2% (1)
- C88% (52)
- D3% (2)
Explanation
You've hit your limit · resets 12:50am (America/New_York)
Topics
#DNS request#Event Search#responsible process#Event Actions
Community Discussion
No community discussion yet for this question.