XDR-ANALYST Question #102: Real Exam Question with Answer & Explanation

The correct answer is C. Add the signer to the allow list in the malware profile.. To prevent the Cortex XDR Agent from blocking execution of a file based on the digital signer in Windows and macOS, one way to add an exception for the signer is to add the signer to the allow list in the malware profile. A malware profile is a profile that defines the settings a

Question

In Windows and macOS you need to prevent the Cortex XDR Agent from blocking execution of a file based on the digital signer. What is one way to add an exception for the singer?

Options

AIn the Restrictions Profile, add the file name and path to the Executable Files allow list.
BCreate a new rule exception and use the singer as the characteristic.
CAdd the signer to the allow list in the malware profile.
DAdd the signer to the allow list under the action center page.

Explanation

To prevent the Cortex XDR Agent from blocking execution of a file based on the digital signer in Windows and macOS, one way to add an exception for the signer is to add the signer to the allow list in the malware profile. A malware profile is a profile that defines the settings and actions for malware prevention and detection on the endpoints. A malware profile allows you to specify a list of files, folders, or signers that you want to exclude from malware scanning and blocking. By adding the signer to the allow list in the malware profile, you can prevent the Cortex XDR Agent from blocking any file that is signed by that signer.

Community Discussion

No community discussion yet for this question.

Full XDR-ANALYST Practice