100% Free CCFH-202b Practice Exam Questions and Answers

Stay Ahead with Latest CCFH-202b CrowdStrike Falcon Practice Test Questions 2026

Page: 1 / 12

Total 60 Questions | Updated On: Oct 27, 2026

Add To Cart

Question 1

What Investigate tool would you use to allow an analyst to view all events for a specific host?

A : Bulk Timeline

B : Host Search

C : Host Timeline

D : Process Timeline

Answer: C

Question 2

With Custom Alerts you are able to configure email alerts using predefined templates so you're notified about specific activity in your environment. Which of the following outlines the steps required to properly create a custom alert rule?

A : Choose the template you would like to configure, setup how often you would like the alert to run, and then schedule the alert

B : Choose the template you would like to configure, preview the search results, and then schedule the alert

C : Create the query for the alert, setup the email template for the alert, and then set the schedule for the alert

D : Create a new custom template, configure the email template, and then create the custom query for the alert

Answer: B

Question 3

Event Search data is recorded with which time zone?

A : PST

B : GMT

C : EST

D : UTC

Answer: D

Question 4

Which of the following does the Hunting and Investigation Guide contain?

A : A list of all event types and their syntax

B : A list of all event types specifically used for hunting and their syntax

C : Example Event Search queries useful for threat hunting

D : Example Event Search queries useful for Falcon platform configuration

Answer: C

Question 5

Which threat framework allows a threat hunter to explore and model specific adversary tactics and techniques, with links to intelligence and case studies?

A : MITRE ATT&CK

B : Lockheed Martin Cyber Kill Chain

C : Director of National Intelligence Cyber Threat Framework

D : NIST 800-171 Cyber Threat Framework

Answer: A

Page: 1 / 12

Total 60 Questions | Updated On: Oct 27, 2026

Add To Cart