Which statement applies to the malware protection flow in Cortex XDR Prevent?
Which statement applies to the malware protection flow in Cortex XDR Prevent?
A trusted signed file is exempt from local static analysis. In Cortex XDR Prevent, if a file is signed by a trusted signer, the agent permits the file to run without performing additional analysis. This is because the trust in the signer's reputation allows the system to bypass further checks.
C should be correct
C is Correct, in local analysis, if the file is signed by a known signer, the Cortex XDR agent permits the file to run and does not perform additional analysis. https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/File-Analysis-and-Protection-Flow
C is correct