Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.

Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.

Exam CCFR-201 topic 1 question 28 discussion

Actual exam question from CrowdStrike's CCFR-201
Question #: 28
Topic #: 1
[All CCFR-201 Questions]

You found a list of SHA256 hashes in an intelligence report and search for them using the Hash Execution Search. What can be determined from the results?

  • A. Identifies a detailed list of all process executions for the specified hashes
  • B. Identifies hosts that loaded or executed the specified hashes
  • C. Identifies users associated with the specified hashes
  • D. Identifies detections related to the specified hashes
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Dkdnfnfmdkdkd
2 months, 1 week ago
The correct answer is A
upvoted 1 times
...
mlobo
2 months, 3 weeks ago
Selected Answer: A
Is A, totally
upvoted 1 times
...
kangaru
3 months ago
Selected Answer: A
Both A and B are correct. But A shows more practical use case for Hash search.
upvoted 1 times
...
sbag0024
3 months, 1 week ago
Selected Answer: B
B is the answer. It even says on the page "Hosts that loaded/executed specified Hash"
upvoted 1 times
...
VasiOnCacao
4 months, 3 weeks ago
Selected Answer: A
I actually think this is A. There is a lot more related here for process execution than hosts in the UI.
upvoted 1 times
...
wildbandana
5 months ago
Could also be the A
upvoted 1 times
...
lightmagenta
5 months ago
answer is B
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...