An administrator needs to check configurations using Audit across several policies and locations
within the organization.
How can the administrator run the query to only these specific devices?
Question No 2
A process wrote an executable file as detailed in the following event:
Which rule type should be used to ensure that files of the same name and path, written by that
process in the future, will not be blocked when they execute?
Question No 3
Which enforcement level does not block unapproved files but will block files that have been
specifically banned?
Question No 4
An administrator has updated a Threat Intelligence Report by turning it into a watchlist and needs to
disable (Ignore) the old Threat Intelligence Report.
Where in the UI is this action not possible to perform?
Question No 5
An analyst navigates to the alerts page in Endpoint Standard and sees the following:
What does the yellow color represent on the left side of the row?