Back to Exams
CrowdStrikeCCFH-202b
CrowdStrike Certified Falcon Hunter
This certification validates practical skills in system administration and infrastructure, including deployment, administration, troubleshooting, and resilience. It is intended for professionals operating dependable enterprise technology environments.
Rate this exam
Exam Details
Total Questions
91Last Updated
Aug. 2026Rating
4.9
Question Types
Multi choices
91 Get Full Access
Unlimited access to all questions
Detailed explanations for every question
Page progress: 2 / 1911%
#6Multiple Choice
What is the purpose of this query?
#7Multiple Choice
Refer to the image.
Why are there six pending containment events?
#8Multiple Choice
Falcon is generating detections for a malicious file evil.exe with varying filepaths on several hosts as end users attempt to execute the file.
Which query can be used to proactively hunt where the file exists prior to the user executing it?
#9Multiple Choice
Which CQL query would output relevant data in tracking USB storage device usage?
#10Multiple Choice
During an investigation you suspect that wget is used broadly to pull commands from C2 servers with public IP addresses.
How can you generate an overview of all those addresses?