CrowdStrike Certified Falcon Hunter (CCFH) — Question 75

While on the Statistics tab in Event Search you can click on results to perform a number of actions.

If you select “Exclude from results” what happens?

Answer options

• A. It will update the Search to remove that field name from results
• B. It will update the Search to remove results matching on the field valid pair
• C. There is no Exclude form results option
• D. It will update the Search to remove that results matching the value

Correct answer: D

Explanation

Choosing 'Exclude from results' specifically removes results that match the specified value, which is why option D is correct. Option A is incorrect because it refers to the field name rather than the value. Option B mistakenly addresses matching on the field valid pair instead of just the value. Option C is incorrect as the option does exist.