A.Ignoring a feed report will ignore all indicators in other threat reports.

B.Ignoring a feed report will remove all instances of the report.

C.Ignoring a feed report will also ignore the threat intelligence feed.

D.Ignoring a feed report will ignore future instances of that report.

A.Schedule an add-hoc cron job to remove

B.Run the cbbannlng script on the EDR server

C.Use a pre-configured system cron job daily to remove them

D.Go to the hashes page on the web console and remove them

A.From the Watchlists Page, select the offending watchlist, click "Clear Alerts" from the Action menu, and then update the watchlist with the correct criteria.

B.Delete the watchlist to automatically clear the alerts, and then create a new watchlist with the correct criteria.

C.Update the Triage Alerts Page to show 200 alerts, click the Select All Checkbox, click the "Dismiss Alert(s)" button for each page, and then update the watchlist with the correct criteria.

D.From the Triage Alerts Page, use the facets to select the watchlist, click the Wrench button to "Mark all as Resolved False Positive", and then update the watchlist with the correct criteria.

A.By Active Directory Mapping

B.Manual policy assignment

C.By branded/policy-specific installer

D.By pushing the designated GPO script

E.By installing the agent via SCCM

F.Via DASCLI command

A.Uninstall the sensor

B.Place the system into Quarantine

C.Place the system into bypass mode

D.Remotely scan the endpoint