CrowdStrike Certified Falcon Responder (CCFR) — Question 23

What happens when you open the full detection details?

Answer options

• A. The process explorer opens and the detection is removed from the console
• B. The process explorer opens and you’re able to view the processes and process relationships
• C. The process explorer opens and the detection copies to the clipboard
• D. The process explorer opens and the Event Search query is run for the detection

Correct answer: B

Explanation

The correct answer is B because opening the full detection details allows you to view the processes and their relationships in the process explorer. Options A, C, and D are incorrect as they describe actions that do not occur when accessing full detection details.