CrowdStrike Certified Falcon Responder (CCFR) — Question 27

What types of events are returned by a Process Timeline?

Answer options

• A. Only detection events
• B. All cloudable events
• C. Only process events
• D. Only network events

Correct answer: B

Explanation

The correct answer is B, as a Process Timeline returns all cloudable events, which encompasses a wider range of events beyond just one type. Options A, C, and D are incorrect because they each limit the scope of events to only specific categories, failing to account for the complete set of cloudable events.