Online Access Free CCSE-204 Practice Test

Which command helps visualize in real time whether sources and sinks are working properly in the Log Collector?

• A.logscale-collector monitor
• B.logscale-collector check
• C.logscale-collector --status
• D.journalctl -u logscale-collector

You find a Falcon Log Collector instance on a Linux system that is not connected to Fleet Management.
What command would you use to enroll the Falcon Log Collector?

• A.sudo humio-log-collector --token <TOKEN> enroll
• B."C:\Program Files (x86)\CrowdStrike\Humio Log Collector\humio-log-collector.exe" enroll <TOKEN>
• C.sudo logscale-collector enroll <TOKEN>
• D.sudo humio-log-collector enroll <TOKEN>

In the Next-Gen SIEM Connector Dashboard, what is the maximum retention period for which you can query third-party data ingestion metrics?

• A.30 days
• B.180 days
• C.90 days
• D.60 days

A SIEM correlation rule triggers when a user logs in from two geographically distant locations within an impossible travel timeframe.

• A.Impossible travel detection
• B.Data exfiltration
• C.Privilege escalation
• D.Malware infection

When deploying the Falcon Log Collector using the commands in the CrowdStrike Fleet Management interface, what is the correct service name?

• A.humio-collector
• B.flc-collector
• C.logscale-collector
• D.flc-api