CrowdStrike Certified Security Engineer (CCSE) — Question 3

What is the time format for the @timestamp field when data is parsed using the CrowdStrike Parsing Standard (CPS)?

Answer options

• A. ISO 8601
• B. Unix Time in microseconds
• C. Human-readable
• D. Unix Time in milliseconds

Correct answer: A

Explanation

The correct answer is ISO 8601, which is a standard format for representing date and time. Unix Time in microseconds, Human-readable, and Unix Time in milliseconds are incorrect because they do not align with the CPS specification for the @timestamp field.