Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.

Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.

Exam CCFR-201 topic 1 question 46 discussion

Actual exam question from CrowdStrike's CCFR-201
Question #: 46
Topic #: 1
[All CCFR-201 Questions]

When analyzing an executable with a global prevalence of common; but you do not know what the executable is, what is the best course of action?

  • A. Do nothing, as this file is common and well known
  • B. From detection, click the VT Hash button to pivot to VirusTotal to investigate further
  • C. From detection, use API manager to create a custom blocklist
  • D. From detection, submit to FalconX for deep dive analysis
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
kangaru
2 months, 2 weeks ago
Selected Answer: B
You don't know what the hash corresponds to, then look in VT. It provides you all details of the hash together with it's reputation.
upvoted 1 times
...
sbag0024
2 months, 4 weeks ago
Selected Answer: B
Going with B on this one. It is an option when looking at Full detection details.
upvoted 1 times
...
sbag0024
2 months, 4 weeks ago
Going with B on this one. It is an option when looking at Full detection details.
upvoted 1 times
...
Aicha78
4 months ago
B is correct
upvoted 1 times
...
wildbandana
4 months, 2 weeks ago
Selected Answer: C
100% sure
upvoted 1 times
...
wildbandana
4 months, 2 weeks ago
Selected Answer: C
checked in docs
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...