최신CrowdStrike Certified SIEM Engineer - CCSE-204무료샘플문제
문제1
What are the two types of connectors used to integrate data between third-party systems and Falcon?
What are the two types of connectors used to integrate data between third-party systems and Falcon?
정답: B
설명: (KoreaDumps 회원만 볼 수 있음)
문제2
Which combination of scope and permissions must be configured to create an API token that allows you to create and get the results of a query job in Next-Gen SIEM?
Which combination of scope and permissions must be configured to create an API token that allows you to create and get the results of a query job in Next-Gen SIEM?
정답: C
설명: (KoreaDumps 회원만 볼 수 있음)
문제3
What should you do with a field that is not CPS-compliant when adding it to a parser?
What should you do with a field that is not CPS-compliant when adding it to a parser?
정답: B
설명: (KoreaDumps 회원만 볼 수 있음)
문제4
An internal security team identified a small number of high-risk users. They ask you to create an app that will monitor these users and trigger an alert when specific suspicious behavior is detected.
Which Falcon feature should you use to develop this app?
An internal security team identified a small number of high-risk users. They ask you to create an app that will monitor these users and trigger an alert when specific suspicious behavior is detected.
Which Falcon feature should you use to develop this app?
정답: B
설명: (KoreaDumps 회원만 볼 수 있음)
문제5
You are creating a correlation rule in Next-Gen SIEM to trigger alerts based on when the event occurred, regardless of when the event was ingested.
Which event timestamp should you select?
You are creating a correlation rule in Next-Gen SIEM to trigger alerts based on when the event occurred, regardless of when the event was ingested.
Which event timestamp should you select?
정답: C
설명: (KoreaDumps 회원만 볼 수 있음)
문제6
You are creating a dashboard that will display inbound network connections. You want to give users the ability to filter the source IP address using a dashboard parameter, so they have the option to either type in the IP they want to filter on or select from a list of IPs found in the data.
What type of parameter would you use?
You are creating a dashboard that will display inbound network connections. You want to give users the ability to filter the source IP address using a dashboard parameter, so they have the option to either type in the IP they want to filter on or select from a list of IPs found in the data.
What type of parameter would you use?
정답: C
설명: (KoreaDumps 회원만 볼 수 있음)
문제7
An analyst needs to identify lateral movement using PowerShell across endpoints leveraging CrowdStrike data integrated into the SIEM platform.
An analyst needs to identify lateral movement using PowerShell across endpoints leveraging CrowdStrike data integrated into the SIEM platform.
정답: D
설명: (KoreaDumps 회원만 볼 수 있음)
문제8
What are the four required CPS-compliant Event parser tags?
What are the four required CPS-compliant Event parser tags?
정답: A
설명: (KoreaDumps 회원만 볼 수 있음)