nerdexam
CrowdStrike

CCFR-201B · Question #51

What is an advantage of using a Process Timeline?

The correct answer is A. Process related events can be filtered to display specific event types. Process Timeline after you click into the Process is as follows. "Agent ID, Target process ID, Parent Process ID, "EVENT TYPE", Company, Time Rage.

Detection Investigation

Question

What is an advantage of using a Process Timeline?

Options

  • AProcess related events can be filtered to display specific event types
  • BSuspicious processes are color-coded based on their frequency and legitimacy over time
  • CProcesses responsible for spikes in CPU performance are displayed over time
  • DA visual representation of Parent-Child and Sibling process relationships is provided

How the community answered

(59 responses)
  • A
    90% (53)
  • B
    3% (2)
  • C
    2% (1)
  • D
    5% (3)

Explanation

Process Timeline after you click into the Process is as follows. "Agent ID, Target process ID, Parent Process ID, "EVENT TYPE", Company, Time Rage.

Topics

#process timeline#event type filtering#investigation#process events

Community Discussion

No community discussion yet for this question.

Full CCFR-201B Practice