CrowdStrike Certified Falcon Administrator (CCFA) — Question 233

Which of the following can be found in the Falcon UI Audit Trail Report?

Answer options

• A. Audit records of Falcon instance billing
• B. Audit records of actions taken by both users and API clients
• C. Audit records of actions taken by only APIs
• D. Audit records of actions taken by only users

Correct answer: B

Explanation

The correct answer is B because the Falcon UI Audit Trail Report includes records of actions performed by both users and API clients. Options A, C, and D are incorrect as they either refer to billing records or limit the scope to only one type of actor (either APIs or users).