A file hash is repeatedly flagged as malware incorrectly for an internal LOB installer. After validation, what can suppress false positives for that file?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Tenant Allow/Block List is the scalpel for confirmed false positives.
Full explanation below image
Full Explanation
Correct Answer — A
Tenant Allow/Block List handles exceptions without disabling protection broadly. Deleting Defender or industry AV is reckless.
Exam tip: Validated FP file → Tenant Allow/Block List.