PSE-Cortex Exam Dumps | An Administrator is alerted to a Suspicious Process Creation security event from multiple users. The

<< Prev Question Next Question >>

Question 29/35

An Administrator is alerted to a Suspicious Process Creation security event from multiple users.
The users believe that these events are false positives Which two steps should the administrator take to confirm the false positives and create an exception? (Choose two )

A. Within the Malware Security profile add the specific parent process, child process, and command line argument to the child process whitelist

B. With the Malware Security profile, disable the "Prevent Malicious Child Process Execution" module

C. Contact support and ask for a security exception.

D. In the Cortex XDR security event, review the specific parent process, child process, and command line arguments

Question 29/35

LEAVE A REPLY

Download PDF File