Where can SHA256 hash values be used in Cortex XDR Malware Protection Profiles?

The correct answer is D. in the Windows Malware Protection Profile to indicate allowed executables. Cortex XDR Malware Protection Profiles allow you to configure the malware prevention settings for Windows, Linux, and macOS endpoints. You can use SHA256 hash values in the Windows Malware Protection Profile to indicate allowed executables that you want to exclude from malware…

Configuration

Question

Options

Ain the macOS Malware Protection Profile to indicate allowed signers
Bin the Linux Malware Protection Profile to indicate allowed Java libraries
CSHA256 hashes cannot be used in Cortex XDR Malware Protection Profiles
Din the Windows Malware Protection Profile to indicate allowed executables

How the community answered

(26 responses)

A
8% (2)
B
4% (1)
C
15% (4)
D
73% (19)

Explanation

Cortex XDR Malware Protection Profiles allow you to configure the malware prevention settings for Windows, Linux, and macOS endpoints. You can use SHA256 hash values in the Windows Malware Protection Profile to indicate allowed executables that you want to exclude from malware scanning. This can help you reduce false positives and improve performance by skipping the scanning of known benign files. You can add up to 1000 SHA256 hash values per profile. You cannot use SHA256 hash values in the Linux or macOS Malware Protection Profiles, but you can use other criteria such as file path, file name, or signer to exclude files from scanning.

Topics

#SHA256#malware protection profile#allowed executables#Windows policy

Community Discussion

No community discussion yet for this question.

Full XDR-ANALYST Practice