Module assessment

1.

The security operations analyst discovered an interesting event, what should be done to mark it for further review?

Tag

Highlight

Flag

2.

Which Behavioral blocking can be used with third-party antivirus?

Client behavior blocking.

EDR in block mode

Feedback-loop blocking

3.

A Windows 10 Device doesn't appear in the device list, what could be the problem?

The Device was renamed.

The Device is missing the latest KBs

The Device had no alerts in the past 30 days.

Check your knowledge