SentinelOne THP Practice Questions - SentinelOne Threat Hunting Professional (THP, S1-301) Exam

Access More Questions

A threat hunter writes the following Deep Visibility PowerQuery: `| from process | where SrcProcName = 'powershell.exe' AND NetworkUrl != null | group by NetworkUrl`. What is the PRIMARY analytical goal of this query?

Identify PowerShell processes that establish outbound network connections, grouped by destination URL Count all DNS queries made by any process in the last 24 hours List all registry keys modified by PowerShell since agent installation Retrieve memory dumps for PowerShell processes calling external hosts

Correct Answer:

Identify PowerShell processes that establish outbound network connections, grouped by destination URL

Access more questions from this quiz

Continue to SentinelOne THP Practice Questions - SentinelOne Threat Hunting Professional (THP, S1-301) Exam for more practice questions and the full quiz experience.

Access More Questions