CrowdStrike CCFR-201b Question Answer
When reviewing CrowdScore Incidents, which of the following statements is INCORRECT?
Incidents aggregate related detections to reduce alert fatigue.
Incidents are defined as inactive after 10 hours pass without any new related activity.
A high CrowdScore indicates a higher likelihood of a sophisticated or widespread attack.
CrowdScore is only visible to users with the ' Falcon Administrator ' role.
TESTED 15 Aug 2026
Copyright © 2014-2026 ACE4Sure. All Rights Reserved