CrowdStrike Exam CCFH-202 Topic 5 Question 22 Discussion

Actual exam question for CrowdStrike's CCFH-202 exam

Question #: 22
Topic #: 5

What is the difference between a Host Search and a Host Timeline?

AHost Search is used for detection investigation and Host Timeline is used for proactive hunting

BA Host Search organizes the data in useful event categories like process executions and network connections, a Host Timeline provides an uncategorized view of recorded events in chronological order

CYou access a Host Search from a detection to show you every recorded process event related to the detection and you can only populate the Host Timeline fields manually

DThere is no difference. You just get to them different ways

Show Suggested Answer

Suggested Answer: B

This is the difference between a Host Search and a Host Timeline. A Host Search is an Investigate tool that allows you to view events by category, such as process executions, network connections, file writes, etc. A Host Timeline is an Investigate tool that allows you to view all events in chronological order, without any categorization. Both tools can be used for detection investigation and proactive hunting, depending on the use case and preference. You can access a Host Search from a detection or manually enter the host details. You can also populate the Host Timeline fields manually or from other pages in Falcon.

by Brice at Jul 02, 2024, 02:30 AM

Limited Time Offer

25%

Off

Get Premium CCFH-202 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Brunilda

4 months ago

B) Bingo! The Host Search is like a well-organized bookshelf, and the Timeline is like a messy drawer full of random stuff. Both have their uses, but you gotta know which one to grab when you need to find that one specific event.

upvoted 0 times

...

Sabine

4 months ago

D) Wait, what? There's a difference? I thought they were just different ways to access the same data. This is like asking me to tell the difference between a fork and a spoon - they're both utensils, right?

upvoted 0 times

...

5 months ago

B) Definitely! The Host Search gives me the categorized data I need for my investigations, while the Timeline shows the raw chronological events. It's like having a structured report and a detailed log all in one place.

upvoted 0 times

Sophia

4 months ago

upvoted 0 times

...

Kanisha

4 months ago

A) Host Search is used for detection investigation and Host Timeline is used for proactive hunting

upvoted 0 times

...

Taryn

6 months ago

I think the difference is that Host Search is for detection investigation and Host Timeline is for proactive hunting.

upvoted 0 times

...