Which action should an Incident Responder take to remediate false positives, according to Symantec best practices?
A) Blacklist
B) Whitelist
C) Delete file
D) Submit file to Cynic

Question

Quizplus · Accepted Answer

Whitelisting is the process of marking a file or activity as safe, which helps in reducing false positives by ensuring that legitimate files or activities are not flagged as threats in the future.

Which Action Should an Incident Responder Take to Remediate False