Question 36

When investigating system-level persistence, it is critical to know what the services.exe process is responsible for. What is its primary function?
  • Question 37

    When looking at the details of a detection, there are two fields called Global Prevalence and Local Prevalence. Which answer best defines Local Prevalence?
  • Question 38

    By default, when a file is quarantined by the Falcon sensor to prevent execution, how many days does that file remain on the host's local disk?
  • Question 39

    An analyst needs to perform local sandbox analysis on a malicious file. When they download a quarantined file from the Falcon UI, what is the file format and the default password?
  • Question 40

    In the 'Graph View' of a detection, processes are connected by arrows. Which of the following does a yellow arrow connecting two processes indicate?