CrowdStrike Certified Falcon Hunter (CCFH) — Question 56

What do you click to jump to a Process Timeline from many pages in Falcon, such as a Hash Search?

Answer options

• A. PID
• B. Process ID or Parent Process ID
• C. CID
• D. Process Timeline Link

Correct answer: B

Explanation

The correct answer is B because the Process ID or Parent Process ID directly links to the Process Timeline in Falcon's interface. Options A, C, and D do not specifically refer to the required action to access the Process Timeline, making them incorrect.