CrowdStrike CCSA Practice Questions - CrowdStrike Certified SIEM Analyst (CCSA) Exam

An analyst needs the 10 source IPs with the most failed logins. Which CQL aggregation is the simplest fit?

`top(SourceIP, limit=10)` `tail(10)` `head(10)` `window(10)`

Correct Answer:

`top(SourceIP, limit=10)`

Access more questions from this quiz

Continue to CrowdStrike CCSA Practice Questions - CrowdStrike Certified SIEM Analyst (CCSA) Exam for more practice questions and the full quiz experience.

Access More Questions