Which type of file attribute is valid for creating a block list entry with Symantec Endpoint Detection and Response (SEDR)?

Which type of file attribute is valid for creating a block list entry with Symantec Endpoint Detection and Response (SEDR)?
A . SHA256
B . Type
C . Date Created
D . Filename

View Answer

Answer: A

Explanation:

When creating a block list entry in Symantec Endpoint Detection and Response (SEDR), the SHA256 hash is a valid file attribute. SHA256 uniquely identifies files based on their content, making it a reliable attribute for ensuring that specific files, regardless of their names or creation dates, are accurately blocked. This hashing method helps prevent identified malicious files from executing, regardless of their locations or renaming attempts by attackers.