QUESTION: 25

When executing a program in App Control, the notification message informs the user that the file is not approved with an option to request approval.
Which Enforcement level is currently enacted?

High
Low
Medium
Default

Answer(s): D

Reveal Solution Next Question

An Enterprise EDR administrator is reviewing the Investigate page and believes they are receiving false positive hits from specific watchlist.
Which three options reduce future false positive hits from this watchlist? (Choose three.)

Disable/remove the IOC associated with the false positives.
Disable/remove the report associated with the false positives.
Dismiss the watchlist hit.
Select edit watchlist and uncheck alert on hits.
Modify policy rules to exclude the false positive directory.
Disable the watchlist associated with the false positives.

Answer(s): A,B,D

Reveal Solution Next Question

QUESTION: 27

Given the following query:
SELECT hostname, cpu_type, cpu_brand, cpu_physical_cores, cpu_logical_cores, cpu_microcode, (1.0 * physical_memory / (1000*1000*1000)) AS physical_mem_gb, hardware_vendor, hardware_model, hardware_version, hardware_serial FROM system_info; Which statement Is correct?