Question 36
When investigating system-level persistence, it is critical to know what the services.exe process is responsible for. What is its primary function?
Question 37
When looking at the details of a detection, there are two fields called Global Prevalence and Local Prevalence. Which answer best defines Local Prevalence?
Question 38
By default, when a file is quarantined by the Falcon sensor to prevent execution, how many days does that file remain on the host's local disk?
Question 39
An analyst needs to perform local sandbox analysis on a malicious file. When they download a quarantined file from the Falcon UI, what is the file format and the default password?
Question 40
In the 'Graph View' of a detection, processes are connected by arrows. Which of the following does a yellow arrow connecting two processes indicate?
