Exam CCFH-202 Topic 9 Question 44 Discussion

Actual exam question for CrowdStrike's CCFH-202 exam
Question #: 44
Topic #: 9
Where would an analyst find information about shells spawned by root, Kernel Module loads, and wget/curl usage?

Suggested Answer: B Vote an answer

The Linux Sensor report is where an analyst would find information about shells spawned by root, Kernel Module loads, and wget/curl usage. The Linux Sensor report is a pre-defined report that provides a summary view of selected activities on Linux hosts. It shows information such as process execution events, network connection events, file write events, etc. that occurred on Linux hosts within a specified time range. The Sensor Health report, the Sensor Policy Daily report, and the Mac Sensor report do not provide the same information.

by Vito at May 09, 2024, 08:18 AM

Limited Time Offer

15%

Off

Get Premium CCFH-202 Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10