An Administrator is alerted to a Suspicious Process Creation security event from multiple users.
The users believe that these events are false positives Which two steps should the administrator take to confirm the false positives and create an exception? (Choose two )
- With the Malware Security profile, disable the "Prevent Malicious Child Process Execution" module
- Within the Malware Security profile add the specific parent process, child process, and command line argument to the child process whitelist
- In the Cortex XDR security event, review the specific parent process, child process, and command line arguments
- Contact support and ask for a security exception.
Display Answer
Next Question