Where would you go to add an exception to exclude a specific file hash from examination by the Malware profile for a Windows endpoint?

The correct answer is D. In the Action Center, choose Allow list, select new action, select add to allow list, add your hash to. To add an exception to exclude a specific file hash from examination by the Malware profile for a Windows endpoint, you need to use the Action Center in Cortex XDR. The Action Center allows you to create and manage actions that apply to endpoints, such as adding files or…

Policy and Exception Management

Question

Options

AFind the Malware profile attached to the endpoint, Under Portable Executable and DLL
BFrom the rules menu select new exception, fill out the criteria, choose the scope to apply it to, hit
CFind the exceptions profile attached to the endpoint, under process exceptions select local
DIn the Action Center, choose Allow list, select new action, select add to allow list, add your hash to

How the community answered

(23 responses)

A
4% (1)
B
17% (4)
C
4% (1)
D
74% (17)

Explanation

To add an exception to exclude a specific file hash from examination by the Malware profile for a Windows endpoint, you need to use the Action Center in Cortex XDR. The Action Center allows you to create and manage actions that apply to endpoints, such as adding files or processes to the allow list or block list, isolating or unisolating endpoints, or initiating live terminal sessions. To add a file hash to the allow list, you need to choose Allow list, select new action, select add to allow list, add your hash to the list, and apply it. This will prevent the Malware profile from scanning or blocking the file on the endpoints that match the scope of the action.

Topics

#file hash exclusion#malware profile#allow list#exception management

Community Discussion

No community discussion yet for this question.

Full XDR-ANALYST Practice