Which ID in Endpoint Standard is associated with one specific action, involves up to three different hashes (Parent, Process, Target), and occurs on a single device at a specific time?

Which strategy is used to create an exclusion in Endpoint Standard for another AV/security product?

The security operations group is complaining that they are getting multiple App Control alerts for specific malicious files after they have banned the file.
Which step is necessary to prevent future alerts on these files?

Management has directed that the SOC team be enabled to create global file bans via the App Control API.
How would this be configured in the App Control Console?

Refer to the exhibit:

Which two statements are true about Carbon Black Live Response (CBLR)? (Choose two.)