Question 26

An Administrator is alerted to a Suspicious Process Creation security event from multiple users.
The users believe that these events are false positives Which two steps should the administrator take to confirm the false positives and create an exception? (Choose two )
  • Question 27

    How do sub-playbooks affect the Incident Context Data?
  • Question 28

    Which deployment type supports installation of an engine on Windows, Mac OS. and Linux?
  • Question 29

    How can you view all the relevant incidents for an indicator?
  • Question 30

    Which step is required to prepare the VDI Golden Image?