An Administrator has identified an EPM-triggered false positive and has used the Create Rule button from within the relevant entry in the Security Events > Preventions > Exploits tab. What is the result of the created rule?
Okay, I'm leaning towards A. If the admin is trying to address a false positive, they probably want to stop all EPM injection into the faulted process, right?
I'm going with D. The rule should include all the relevant details like the EPM, process, machine, and a descriptive name. Seems like the most comprehensive option.
Hmm, I think the answer is B. The new rule should stop all EPM injection into processes on the machine where the prevention was triggered, not just the faulted process.
Marisha
28 days agoArt
8 days agoKayleigh
10 days agoTarra
1 months agoKenneth
1 months agoBeatriz
16 days agoBarbra
18 days agoSalley
23 days agoHyman
1 months agoDalene
1 months agoCarmen
1 months agoTran
18 days agoMel
23 days agoCassandra
1 months agoHyman
2 months ago