CrowdStrike Certified Falcon Hunter (CCFH) — Question 82
Which of the following best describes the purpose of the Mac Sensor report?
Answer options
- A. The Mac Sensor report displays a listing of all Mac hosts without a Falcon sensor installed
- B. The Mac Sensor report provides a detection focused view of known malicious activities occurring on Mac hosts, including machine-learning and indicator-based detections
- C. The Mac Sensor report displays a listing of all Mac hosts with a Falcon sensor installed
- D. The Mac Sensor report provides a comprehensive view of activities occurring on Mac hosts, including items of interest that may be hunting or investigation leads
Correct answer: D
Explanation
The correct answer is D because the Mac Sensor report indeed provides a comprehensive overview of activities on Mac hosts and highlights items that may be relevant for further investigation. Options A and C are incorrect as they focus solely on the presence or absence of the Falcon sensor, while option B, although related to malicious activities, does not capture the full breadth of the report's purpose.