CrowdStrike Certified Falcon Responder (CCFR) — Question 48

From the Detections page, how can you view 'in-progress' detections assigned to Falcon Analyst Alex?

Answer options

• A. Filter on 'Analyst: Alex'
• B. Alex does not have the correct role permissions as a Falcon Analyst to be assigned detections
• C. Filter on 'Hostname: Alex' and 'Status: In-Progress'
• D. Filter on 'Status: In-Progress' and 'Assigned-to: Alex'

Correct answer: D

Explanation

The correct answer is D because filtering by 'Status: In-Progress' and 'Assigned-to: Alex' specifically targets the detections that Alex is currently responsible for. Option A is incorrect as it does not specify the status of the detections, while option B wrongly states that Alex lacks permissions, and option C incorrectly uses 'Hostname' instead of the appropriate filter for assigned detections.