An administrator observes the following event detail in the Investigate tab for an application with an unknown reputation making network connections:
Upon further review of the event details returned, the reputation is observed as NOT_LISTED, and the applied (cloud) reputation is UNKNOWN.
Why is the applied (cloud) reputation UNKNOWN and not NOT_LISTED?
A . The sensor demoted the local reputation from UNKNOWN to NOT_LISTED based on the coud reputation.
B . NOT_LISTED was applied by the sensor after observing no cloud reputation, as
evidenced by the applied cloud reputation UNKNOW
D . The application was UNKNOWN at the time of the event but then later determined to be NOT_LISTE
F . The sensor demoted the local reputation from NOT_LISTED to UNKNOWN based on the cloud reputation.
Answer: C
Leave a Reply