CrowdStrike Exam CCFR-201 Topic 2 Question 31 Discussion

Actual exam question for CrowdStrike's CCFR-201 exam

Question #: 31
Topic #: 2

When looking at the details of a detection, there are two fields called Global Prevalence and Local Prevalence. Which answer best defines Local Prevalence?

ALocal prevalence is the frequency with which the hash of the triggering file is seen across the entire Internet

BLocal Prevalence tells you how common the hash of the triggering file is within your environment (CID)

CLocal Prevalence is the Virus Total score for the hash of the triggering file

DLocal prevalence is the frequency with which the hash of the triggering file is seen across all CrowdStrike customer environments

Show Suggested Answer

Suggested Answer: B

According to theCrowdStrike Falcon Devices Add-on for Splunk Installation and Configuration Guide v3.1.5+, Global Prevalence and Local Prevalence are two fields that provide information about how common or rare a file is based on its hash value2.Global Prevalence tells you how frequently the hash of the triggering file is seen across all CrowdStrike customer environments2.Local Prevalence tells you how frequently the hash of the triggering file is seen within your environment (CID)2.These fields can help you assess the risk and impact of a detection2.

by Merilyn at Jan 10, 2025, 12:00 AM

Limited Time Offer

25%

Off

Get Premium CCFR-201 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Keneth

4 days ago

I think the answer is B) Local Prevalence tells you how common the hash of the triggering file is within your environment (CID)

upvoted 0 times

...

Tora

5 days ago

A) Local prevalence is the frequency with which the hash of the triggering file is seen across the entire Internet. Hmm, that sounds a bit too broad to be 'local'.

upvoted 0 times

...

Jody

6 days ago

D) Local prevalence is the frequency with which the hash of the triggering file is seen across all CrowdStrike customer environments. Seems like the most comprehensive definition.

upvoted 0 times

...

France

13 days ago

B) Local Prevalence tells you how common the hash of the triggering file is within your environment (CID). This makes the most sense to me.

upvoted 0 times

Brunilda

3 days ago

A) Local prevalence is the frequency with which the hash of the triggering file is seen across the entire Internet

upvoted 0 times

...