After scan, how does file quarantine function work on an endpoint?
After scan, how does file quarantine function work on an endpoint?
A . Quarantine takes ownership of the files and folders and prevents execution through access control.
B . Quarantine disables the network adapters and locks down access preventing any
communications with the endpoint.
C . Quarantine removes a specific file from its location on a local or removable drive to a protected folder and prevents it from being executed.
D . Quarantine prevents an endpoint from communicating with anything besides the listed exceptions in the agent profile and Cortex XD
Answer: C
Explanation:
Reference: https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-prevent-admin/investigation-and-response/investigate-files/manage-quarantined-files
Latest PCDRA Dumps Valid Version with 60 Q&As
Latest And Valid Q&A | Instant Download | Once Fail, Full Refund