Which action should an Incident Responder take to remediate false positives, according to Symantec best practices?

Which action should an Incident Responder take to remediate false positives, according to Symantec best practices?
A. Blacklist
B. Whitelist
C. Delete file
D. Submit file to Cynic

Download Printable PDF. VALID exam to help you PASS.