Logo ExamsQA
Exit
Official Bank 0/60

CrowdStrike Certified Falcon Responder (CCFR-201) - CrowdStrike Exam Questions

Last updated on June 20, 2026

97% Exam Compliance
60 Total Questions
1
Question
The primary purpose for running a Hash Search is to:
Options
A determine the origin of the detection
B review information surrounding a hash's related activity
C review the processes involved with a detection
D determine any network connections
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

2
Question
When you configure and apply an IOA exclusion, what impact does it have on the host and what you

see in the console?
Options
A The sensor will stop sending events from the process specified in the regex pattern
B The associated detection will be suppressed and the associated process would have been allowed to run
C The associated IOA will still generate a detection but the associated process would have been allowed to run
D The process specified is not sent to the Falcon Sandbox for analysis
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

3
Question
Which of the following tactic and technique combinations is sourced from MITRE ATT&CK information?
Options
A Credential Access via OS Credential Dumping
B Malware via PUP
C Machine Learning via Cloud-Based ML
D Falcon Intel via Intelligence Indicator - Domain
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

4
Question
The Bulk Domain Search tool contains Domain information along with which of the following?
Options
A IP Lookup Information
B Port Information
C Threat Actor Information
D Process Information
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

5
Question
The Falcon platform will show a maximum of how many detections per day for a single Agent Identifier (AID)?
Options
A 1000
B 750
C 1200
D 500
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

Finish Practice?

Are you sure you want to finish? This will end your practice session.