Which option indicates a hash is allowlisted?
Which option indicates a hash is allowlisted?
To indicate that a hash is allowlisted, the correct option is 'Allow'. When a hash is marked as 'Allow', it explicitly permits the hash to run or perform its intended actions on the system. This action ensures that the hash is included in the allowlist, indicating that it is trusted and should not be blocked.
B checked in docs
WRONG! GTFO
checked in docs
wrong you did not check at all bc no where in the UI is an "allow" an option
This time he's right lol. There is 'allow' in IoC Hash
The correct answer is A. No Action, Never block, Always Block, and Remove Hashes are the only options.
Use allow to add hash to allowlist. IoC Management only supports allowlisting in Hash. To apply for IP and Domains, use IoA Rules.
The option that indicates a hash is allowlisted is: B. Allow When a hash is allowlisted, it means that it is explicitly permitted and allowed to run or perform its intended actions on the system. Therefore, selecting "Allow" indicates that the hash is included in the allowlist.
Answer is B, Allow Checked the IOC management UI, the "action" only have four types : Block, Detect Only, Allow and Block + hide detection.