Question 26
An Administrator is alerted to a Suspicious Process Creation security event from multiple users.
The users believe that these events are false positives Which two steps should the administrator take to confirm the false positives and create an exception? (Choose two )
The users believe that these events are false positives Which two steps should the administrator take to confirm the false positives and create an exception? (Choose two )
Question 27
How do sub-playbooks affect the Incident Context Data?
Question 28
Which deployment type supports installation of an engine on Windows, Mac OS. and Linux?
Question 29
How can you view all the relevant incidents for an indicator?
Question 30
Which step is required to prepare the VDI Golden Image?
