Exam CCFR-201 topic 1 question 43 discussion

Actual exam question from CrowdStrike's CCFR-201

Question #: 43
Topic #: 1

[All CCFR-201 Questions]

Aside from a Process Timeline or Event Search, how do you export process event data from a detection in .CSV format?

A. You can’t export detailed event data from a detection, you have to use the Process Timeline or an Event Search
B. In Full Detection Details, you expand the nodes of the process tree you wish to expand and then click the "Export Process Events" button
C. In Full Detection Details, you choose the "View Process Activity" option and then export from that view
D. From the Detections Dashboard, you right-click the event type you wish to export and choose CSV, JSON or XML

Show Suggested Answer

Suggested Answer: C 🗳️

by lightmagenta at Dec. 13, 2023, 7:01 a.m.

Comments

Submit Cancel

alanalanalan

7 months, 3 weeks ago

Selected Answer: C

I pick C D is not correct, refer to document, it only can export CSV orJSON, but not XML. Falcon Documentation > Falcon Management > Falcon Console User Guide. Data export, In many apps, you can export data on the screen to CSV or JSON format by clicking the export button

upvoted 1 times

...