Your company uses Microsoft Defender for Endpoint.
The company has Microsoft Word documents that contain macros. The documents are used frequently on the devices of the company's accounting team.
You need to hide false positive in the Alerts queue, while maintaining the existing security posture.
Which three actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

Question

Your company uses Microsoft Defender for Endpoint.

The company has Microsoft Word documents that contain macros. The documents are used frequently on the devices of the company's accounting team.

You need to hide false positive in the Alerts queue, while maintaining the existing security posture.

Which three actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

charles ratchagaraj · Accepted Answer

Hide the alert.

charles ratchagaraj · Accepted Answer

Create a suppression rule scoped to any device.

charles ratchagaraj · Accepted Answer

Generate the alert.

charles ratchagaraj · Answer

Resolve the alert automatically.

charles ratchagaraj · Answer

Create a suppression rule scoped to a device group.

List of questions