CrowdStrike Exam CCFR-201 Topic 1 Question 13 Discussion

Actual exam question for CrowdStrike's CCFR-201 exam

Question #: 13
Topic #: 1

When looking at the details of a detection, there are two fields called Global Prevalence and Local Prevalence. Which answer best defines Local Prevalence?

ALocal prevalence is the frequency with which the hash of the triggering file is seen across the entire Internet

BLocal Prevalence tells you how common the hash of the triggering file is within your environment (CID)

CLocal Prevalence is the Virus Total score for the hash of the triggering file

DLocal prevalence is the frequency with which the hash of the triggering file is seen across all CrowdStrike customer environments

Show Suggested Answer

Suggested Answer: B

According to theCrowdStrike Falcon Devices Add-on for Splunk Installation and Configuration Guide v3.1.5+, Global Prevalence and Local Prevalence are two fields that provide information about how common or rare a file is based on its hash value2.Global Prevalence tells you how frequently the hash of the triggering file is seen across all CrowdStrike customer environments2.Local Prevalence tells you how frequently the hash of the triggering file is seen within your environment (CID)2.These fields can help you assess the risk and impact of a detection2.

by Arlette at May 09, 2024, 02:42 PM

Limited Time Offer

25%

6 months ago

I don't really get why they're asking about Local Prevalence.

upvoted 0 times

...