Which function describes the removal of a specific file from its location on a local or removable drive to a protected folder to prevent the file from being executed?

The correct answer is C. Quarantine. The function that describes the removal of a specific file from its location on a local or removable drive to a protected folder to prevent the file from being executed is quarantine. Quarantine is a feature of Cortex XDR that allows you to isolate malicious or suspicious files…

Endpoint Response Actions

Question

Options

ASearch & destroy
BIsolation
CQuarantine
DFlag for removal

How the community answered

(39 responses)

A
3% (1)
B
15% (6)
C
74% (29)
D
8% (3)

Explanation

The function that describes the removal of a specific file from its location on a local or removable drive to a protected folder to prevent the file from being executed is quarantine. Quarantine is a feature of Cortex XDR that allows you to isolate malicious or suspicious files from the endpoint and prevent them from running or spreading. You can quarantine files manually from the Cortex XDR console, or automatically based on the malware analysis profile or the remediation suggestions. When you quarantine a file, the Cortex XDR agent encrypts the file and moves it to a hidden folder under the agent installation directory. The file is also renamed with a random string and a .quarantine extension. You can view, restore, or delete the quarantined files from the Cortex XDR console.

Topics

#quarantine#file remediation#malware response#endpoint protection

Community Discussion

No community discussion yet for this question.

Full XDR-ANALYST Practice