nerdexam
CrowdStrike

CCFR-201B · Question #64

Which search type should be used to investigate whether a suspicious executable has affected multiple hosts?

The correct answer is B. Hash Search. You've hit your limit · resets 12:50am (America/New_York)

Threat Investigation and Search

Question

Which search type should be used to investigate whether a suspicious executable has affected multiple hosts?

Options

  • AHost Search
  • BHash Search
  • CUser Search
  • DBulk Domain Search

How the community answered

(25 responses)
  • A
    8% (2)
  • B
    88% (22)
  • C
    4% (1)

Explanation

You've hit your limit · resets 12:50am (America/New_York)

Topics

#Hash Search#executable investigation#multi-host analysis#search types

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full CCFR-201B Practice