CrowdStrike Certified Falcon Responder (CCFR) — Question 32

When looking at the details of a detection, there are two fields called Global Prevalence and Local Prevalence. Which answer best defines Local Prevalence?

Answer options

• A. Local prevalence is the frequency with which the hash of the triggering file is seen across the entire Internet
• B. Local Prevalence tells you how common the hash of the triggering file is within your environment (CID)
• C. Local Prevalence is the Virus Total score for the hash of the triggering file
• D. Local prevalence is the frequency with which the hash of the triggering file is seen across all CrowdStrike customer environments

Correct answer: B

Explanation

The correct answer, B, accurately describes Local Prevalence as the occurrence of the file's hash within your specific environment, making it a more localized measure. Option A discusses the entire Internet, which is not relevant to Local Prevalence. Option C incorrectly equates Local Prevalence with the Virus Total score, and option D refers to a broader scope involving all CrowdStrike customers, rather than just your environment.