According to Event Data Dictionary, The ContextProcessID is "the unique ID of a process that was spawned by another process. For example, if Process 1 spawns Process 2, the TargetProcessId of Process 1 will match the ContextProcessId of Process 2." So answer would be D, as the Context process ID of the DNS request would be the same value as the target process ID of the process that generated the DNS request.
Actually, here I also think it might be D. Look at this reddit post - https://www.reddit.com/r/crowdstrike/comments/hr1kyb/rename_contextprocessid_decimal_as/.
In other words ContextProcessId is generated to enrich the TargetProcessId event and has the same value. The main event won't contain ContextProcessId event, but a TargetProcessId.
Not sure about D for this one it says TargetProcessID. NOT TargetProcessId_decimal. Both TargetProcessId and TargetProcessId_decimal are different things. I don't see a correct answer here?
This section is not available anymore. Please use the main Exam Page.CCFR-201 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
evilCorpBot7494
3 weeks, 6 days agoalanalanalan
7 months, 1 week agokangaru
10 months, 2 weeks agoVasiOnCacao
1 year agosbag0024
11 months agosbag0024
11 months agosbag0024
11 months agowildbandana
1 year ago