Q1 Single choice Flag Which action should an Incident Responder take to remediate false positives, according to Symantec best practices? A Blacklist B Whitelist C Delete file D Submit file to Cynic Correct answer