Prev Question
Next Question

Which action should an Incident Responder take to remediate false positives, according to Symantec best practices?

A. Blacklist

B. Whitelist

C. Delete file

D. Submit file to Cynic

Explanation:

Reference: https://symwisedownload.symantec.com//resources/sites/SYMWISE/content/live/DOCUMENTATION/10000/DOC10899/en_US/satp_security_ops_guide_3.0.5.pdf?__gda__=1541987119_a3559016c9355c98c2ec53278a8df2a0 (119)

Prev Question
Next Question

Leave a Reply

Your email address will not be published. Required fields are marked *