CrowdStrike Certified Falcon Hunter (CCFH) — Question 58

What kind of activity does a User Search help you investigate?

Answer options

• A. A history of Falcon UI logon activity
• B. A list of process activity executed by the specified user account
• C. A count of failed user logon activity
• D. A list of DNS queries by the specified user account

Correct answer: B

Explanation

The correct answer is B because a User Search specifically focuses on the activities associated with a user account, particularly the processes they have executed. Options A, C, and D pertain to other aspects of user activity but do not directly relate to the specific processes executed by the user.