問題文
A penetration testing workstation generates a large number of detections every day, and the team has agreed that alerting on that single machine adds no value during the engagement. Which capability addresses this at the level of that one host?
選択肢
- Creating a host group that contains that workstation alone and assigning it a prevention policy in which every protective setting has been switched off, which produces the same quiet on that machine.
- Disabling detections for that host from the host management page.
- Uninstalling the sensor from the workstation for the whole duration of the engagement.
- Adding the workstation's host name to the blocklist so that its activity is passed over.