A. Ransomware Prevention

B. Device Control

C. Execution Prevention

D. Exfiltration Prevention

A. A collector blocks unsafe applications from running

B. A collector records applications that communicate externally

C. A collector can quarantine unsafe applications from communicating

D. A collector is used to change the reputation score of any application that collector runs

A. The forensics data is displayed m the stacks view

B. The device has been isolated

C. An exception has been created for this event

D. The exfiltration prevention policy has blocked this event