nerdexam
CrowdStrike

CCFR-201B · Question #24

From a detection, what is the fastest way to see children and sibling process information?

The correct answer is B. Select Full Detection Details from the detection. Right click gives you basic web/OS options, nothing application specific. This is more appropriate since the details and tree are provided with full details.

Detection Investigation

Question

From a detection, what is the fastest way to see children and sibling process information?

Options

  • ASelect the Event Search option. Then from the Event Actions, select Show Associated Event Data
  • BSelect Full Detection Details from the detection
  • CRight-click the process and select "Follow Process Chain"
  • DSelect the Process Timeline feature, enter the AID, Target Process ID, and Parent Process ID

How the community answered

(46 responses)
  • A
    2% (1)
  • B
    91% (42)
  • C
    4% (2)
  • D
    2% (1)

Explanation

Right click gives you basic web/OS options, nothing application specific. This is more appropriate since the details and tree are provided with full details.

Topics

#Full Detection Details#process tree#sibling processes#detection navigation

Community Discussion

No community discussion yet for this question.

Full CCFR-201B Practice