An analyst on the security team noticed that several alerts are false positives within Enterprise EDR. The analyst disables the IOC within the report from those alerts. Which statement correctly…

Question

Options

• AThat specific IOC in the report will no longer generate hits or alerts on the device from the alert.
• BThe report will no longer generate hits or alerts on the device from the alert.
• CThat specific IOC in the report will no longer generate hits or alerts.
• DThe report will no longer generate hits or alerts.

• A
  10% (3)
• B
  3% (1)
• C
  83% (24)
• D
  3% (1)

No community discussion yet for this question.