CrowdStrike Certified Falcon Responder (CCFR) — Question 10

Where are quarantined files stored on Windows hosts?

Answer options

• A. Windows\Quarantine
• B. Windows\System32\Drivers\CrowdStrike\Quarantine
• C. Windows\System32\
• D. Windows\temp\Drivers\CrowdStrike\Quarantine

Correct answer: B

Explanation

The correct answer is B, as quarantined files are specifically stored in the Windows\System32\Drivers\CrowdStrike\Quarantine directory by CrowdStrike's software. The other options either point to incorrect directories or do not exist in the context of CrowdStrike's quarantine process.