CrowdStrike Certified Falcon Responder (CCFR) — Question 8

What is an advantage of using a Process Timeline?

Answer options

• A. Process related events can be filtered to display specific event types
• B. Suspicious processes are color-coded based on their frequency and legitimacy over time
• C. Processes responsible for spikes in CPU performance are displayed over time
• D. A visual representation of Parent-Child and Sibling process relationships is provided

Correct answer: A

Explanation

The correct answer, A, highlights the ability to filter process events, which is a key feature of a Process Timeline. Options B, C, and D describe useful features but do not specifically address the filtering capability that is the main advantage of using a Process Timeline.