nerdexam
CrowdStrike

CCFH-202B · Question #8

When exporting the results of the following event search, what data is saved in the exported file (assuming Verbose Mode)? event_simpleName=*Written | stats count by ComputerName

The correct answer is B. The results of the Statistics tab. When exporting the results of an event search, the data that is saved in the exported file depends on the mode and the tab that is selected. In this case, the mode is Verbose and the tab is Statistics, as indicated by the stats command. Therefore, the data that is saved in the…

Event Search and Query Fundamentals

Question

When exporting the results of the following event search, what data is saved in the exported file (assuming Verbose Mode)? event_simpleName=*Written | stats count by ComputerName

Options

  • AThe text of the query
  • BThe results of the Statistics tab
  • CNo data Results can only be exported when the "table" command is used
  • DAll events in the Events tab

How the community answered

(21 responses)
  • B
    95% (20)
  • D
    5% (1)

Explanation

When exporting the results of an event search, the data that is saved in the exported file depends on the mode and the tab that is selected. In this case, the mode is Verbose and the tab is Statistics, as indicated by the stats command. Therefore, the data that is saved in the exported file is the results of the Statistics tab, which shows the count of events by ComputerName. The text of the query, all events in the Events tab, and no data are not correct answers.

Topics

#export results#Statistics tab#Verbose Mode#transforming commands

Community Discussion

No community discussion yet for this question.

Full CCFH-202B Practice