CrowdStrike Certified Falcon Administrator (CCFA) — Question 214
What information is provided in “Remote or network Logon Activities” under Visibility Reports?
Answer options
- A. A list of all logons for all users
- B. A list of last endpoints that a user logged in to
- C. A list of users who are remotely logged on to devices based on local IP and local port
- D. A list of unique users who are remotely logged on to devices based on the country
Correct answer: B
Explanation
The correct answer is B because it specifically highlights the last endpoints a user logged into, which is the focus of that report section. Option A is incorrect as it refers to all user logons, not just the last endpoints. Options C and D are also wrong because they pertain to users logged on based on local IP and geographic location, which are not the main details provided in the report.