What is the most appropriate role that can be added to fullfil this requirement?

Your CISO has decided all Falcon Analysts should also have the ability to view files and file contents locally on compromised hosts, but without the ability to take them off the host.

What is the most appropriate role that can be added to fullfil this requirement?
A . Remediation Manager
B . Real Time Responder C Read Only Analyst
C . Falcon Analyst C Read Only
D . Real Time Responder C Active Responder

View Answer

Answer: B