Referring to the exhibit, which two statements are correct?

Review the exhibit.

You are at the Malware Incident page. A virus was detected by the Netskope Heuristics Engine. Your security team has confirmed that the virus was a test data file You want to allow the security team to use this file.

Referring to the exhibit, which two statements are correct? (Choose two.)
A . Click the "Add To File Filter button to add the IOC to a file list.
B . Contact the CrowdStrike administrator to have the file marked as safe.
C . Click the ”Lookup VirusTotal" button to verify if this IOC is a false positive.
D . Create a malware detection profile and update the file hash list with the IOC.

View Answer

Answer: AC

Explanation:

To allow the security team to use the test data file that was detected as a virus by the Netskope Heuristics Engine, the following two steps are correct:

Click the “Add To File Filter” button to add the IOC to a file list. This will exclude the file from future malware scans and prevent false positive alerts. The file list can be managed in the Settings > File Filter page1.

Click the “Lookup VirusTotal” button to verify if this IOC is a false positive. This will open a new tab with the VirusTotal report for the file hash. VirusTotal is a service that analyzes files and URLs for viruses, worms, trojans, and other kinds of malicious content. The report will show how many antivirus engines detected the file as malicious and provide additional information about the file2.

https://docs.netskope.com/en/netskope-help/admin-console/incidents/