Broadcom-VMware
5V0-91.20 · Question #116
5V0-91.20 Question #116: Real Exam Question with Answer & Explanation
Sign in or unlock 5V0-91.20 to reveal the answer and full explanation for question #116. The question stem and answer options stay visible for context.
Question
An Enterprise EDR administrator is reviewing the Investigate page and believes they are receiving false positive hits from specific watchlist.
Which three options reduce future false positive hits from this watchlist? (Choose three.)
Options
- ADisable/remove the IOC associated with the false positives.
- BDisable/remove the report associated with the false positives.
- CDismiss the watchlist hit.
- DSelect edit watchlist and uncheck alert on hits.
- EModify policy rules to exclude the false positive directory.
- FDisable the watchlist associated with the false positives.
Unlock 5V0-91.20 to see the answer
You've previewed enough free 5V0-91.20 questions. Unlock 5V0-91.20 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.