2.4 Identify and Explain Exclusions and Exceptions XDR-ANALYST Practice Questions (Page 7)

Questions 31–33

1. 31foundation · easy

   After defining the criteria for an exception, what is the next step in the creation process?

   • ADelete the underlying rule
   • BSelect the exception type (e.g., alert, policy)
   • CApply the exception to the relevant rules or alerts
   • DSet the scope to all endpoints
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   When creating an exception in the XDR platform, what is the purpose of defining criteria?

   • ATo specify which alerts or rules the exception applies to
   • BTo set the expiration date of the exception
   • CTo determine the type of exception (e.g., alert, policy)
   • DTo define the scope of the exception (e.g., endpoints)
   Reveal Solution Discussion Select an answer first
3. 33foundation · easy

   Which of the following is a best practice when creating exclusions in XDR?

   • AUse the broadest possible scope to ensure all false positives are suppressed
   • BDocument the reason for each exclusion and review them regularly
   • CCreate exclusions for any alert that is a false positive to reduce noise
   • DSet exclusions to never expire to avoid maintenance
   Reveal Solution Discussion Select an answer first