What are three ways to ignore a feed report within the EDR user interface? (Choose three.)

Refer to the exhibit:

Which two statements are true about Carbon Black Live Response (CBLR)? (Choose two.)

Which Live Query statement is properly constructed?

An Endpoint Standard administrator is working with an IT team to explicitly permit specific applications from the environment using both the IT Tools and Certs Approved List features.
Once applied, which reputation would these applications be classified under for processing?

A watchlist generates a false positive on the Triage Alerts page, so the watchlist must be updated.
How should this task be accomplished?