A. The trusted-publisher mechanism is called whenever an executable file would otherwise get an Unknown or No Connection verdict.

B. The trusted-publisher mechanism allows trusted signed executables to run without seeking a WildFire verdict.

C. The list of trusted publishers is maintained through content updates.

D. No executable will be affected by the trusted-publisher mechanism unless it is signed by a publisher on a list maintained by Palo Alto Networks.

E. The trusted-publisher mechanism takes precedence over verdict overrides by administrators.

F. The trusted-publisher mechanism blocks executables from running unless they are signed by a trusted publisher.