CrowdStrike Exam CCFR-201 Topic 2 Question 22 Discussion

Actual exam question for CrowdStrike's CCFR-201 exam

Question #: 22
Topic #: 2

When looking at the details of a detection, there are two fields called Global Prevalence and Local Prevalence. Which answer best defines Local Prevalence?

ALocal prevalence is the frequency with which the hash of the triggering file is seen across the entire Internet

BLocal Prevalence tells you how common the hash of the triggering file is within your environment (CID)

CLocal Prevalence is the Virus Total score for the hash of the triggering file

DLocal prevalence is the frequency with which the hash of the triggering file is seen across all CrowdStrike customer environments

Show Suggested Answer

Suggested Answer: B

According to theCrowdStrike Falcon Devices Add-on for Splunk Installation and Configuration Guide v3.1.5+, Global Prevalence and Local Prevalence are two fields that provide information about how common or rare a file is based on its hash value2.Global Prevalence tells you how frequently the hash of the triggering file is seen across all CrowdStrike customer environments2.Local Prevalence tells you how frequently the hash of the triggering file is seen within your environment (CID)2.These fields can help you assess the risk and impact of a detection2.

by King at Sep 08, 2024, 09:32 AM

Limited Time Offer

25%

Off

Get Premium CCFR-201 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Tenesha

2 months ago

I believe the correct answer is B because it specifically refers to the environment.

upvoted 0 times

...

Chan

2 months ago

I'm not sure, but I think it's either B or D.

upvoted 0 times

...

Shawnda

2 months ago

I agree with Elena, B makes the most sense.

upvoted 0 times

...

2 months ago

I think the answer is B.

upvoted 0 times

...

D) Local prevalence is the frequency with which the hash of the triggering file is seen across all CrowdStrike customer environments. Knowing the wider industry prevalence is important to assess the risk.

upvoted 0 times

Leatha

1 months ago

D) Local prevalence is the frequency with which the hash of the triggering file is seen across all CrowdStrike customer environments

upvoted 0 times

...

Juliann

2 months ago

A) Local prevalence is the frequency with which the hash of the triggering file is seen across all CrowdStrike customer environments

upvoted 0 times

...

Eleonora

2 months ago

B) Local Prevalence tells you how common the hash of the triggering file is within your environment (CID)

upvoted 0 times

...

Audra

3 months ago

A) Local prevalence is the frequency with which the hash of the triggering file is seen across all CrowdStrike customer environments

upvoted 0 times

...

Lashawnda

3 months ago

B) Local Prevalence tells you how common the hash of the triggering file is within your environment (CID). This makes the most sense to me, as I would want to know the prevalence within my own network.

upvoted 0 times

Phil

3 months ago

B) Local Prevalence tells you how common the hash of the triggering file is within your environment (CID)

upvoted 0 times

...

Dean

3 months ago

A) Local prevalence is the frequency with which the hash of the triggering file is seen across the entire Internet

upvoted 0 times

...

CrowdStrike Exam CCFR-201 Topic 2 Question 22 Discussion

Contribute your Thoughts:

Tenesha

Chan

Shawnda

Horace

Lenna

Cary

Colton

Alysa

Elena

Cyndy

Leatha

Juliann

Eleonora

Audra

Lashawnda

Phil

Dean