Knowledge check

Completed

Choose the best response for each of the questions below.

Check your knowledge

1.

The security operations analyst discovered an interesting event, what should be done to mark it for further review?

Tag

Highlight

Flag

2.

Which Behavioral blocking can be used with third-party antivirus?

Client behavior blocking.

EDR in block mode

Feedback-loop blocking

3.

A Windows 10 Device doesn't appear in the device list, what could be the problem?

The Device was renamed.

The Device is missing the latest KBs

The Device had no alerts in the past 30 days.

You must answer all questions before checking your work.