CrowdStrike Certified Falcon Hunter (CCFH) — Question 60

You are reviewing a list of domains recently banned by your organization's acceptable use policy. In particular, you are looking for the number of hosts that have visited each domain. Which tool should you use in Falcon?

Answer options

• A. Create a custom alert for each domain
• B. Allowed Domain Summary Report
• C. Bulk Domain Search
• D. IP Addresses Search

Correct answer: C

Explanation

The correct answer is C, Bulk Domain Search, as it allows you to efficiently check the number of hosts visiting multiple domains at once. Option A, creating a custom alert for each domain, would be time-consuming and not practical for this purpose. Option B, the Allowed Domain Summary Report, pertains to permitted domains rather than banned ones, and option D, IP Addresses Search, does not directly provide the number of hosts visiting specific domains.