CrowdStrike Exam CCFH-202 Topic 5 Question 16 Discussion

Actual exam question for CrowdStrike's CCFH-202 exam

Question #: 16
Topic #: 5

[All CCFH-202 Questions]

Where would an analyst find information about shells spawned by root, Kernel Module loads, and wget/curl usage?

ASensor Health report

BLinux Sensor report

CSensor Policy Daily report

DMac Sensor report

Show Suggested Answer

Suggested Answer: B

The Linux Sensor report is where an analyst would find information about shells spawned by root, Kernel Module loads, and wget/curl usage. The Linux Sensor report is a pre-defined report that provides a summary view of selected activities on Linux hosts. It shows information such as process execution events, network connection events, file write events, etc. that occurred on Linux hosts within a specified time range. The Sensor Health report, the Sensor Policy Daily report, and the Mac Sensor report do not provide the same information.

by Alton at Apr 20, 2024, 01:07 AM

Limited Time Offer

25%

8 months ago

Where would an analyst find information about shells spawned by root, Kernel Module loads, and wget/curl usage?

upvoted 0 times

...