Which action should you perform to make the endpoint agent's events invisible in Enforce?

Which action should you perform to make the endpoint agent's events invisible in Enforce?

• A. Reinstall the agent
• B. Disable action from Symantec Management Console
• C. Remove the agent from the console
• D. Clear the agent cache

Answer: (B)

Events from the endpoint agent reach Enforce based on actions configured in the Symantec Management Console. By disabling the action that forwards or handles endpoint events, the agent stopssending those events to Enforce, so nothing appears there. This keeps the agent running on the endpoint but prevents visibility of its events in Enforce, which is exactly what you want when you need to hide those events without removing or reinstalling the agent. Reinstalling the agent or removing it from the console would be more disruptive and not specifically about hiding the events in Enforce, while clearing the agent cache only affects local data and does not stop events from being sent to Enforce.

Events from the endpoint agent reach Enforce based on actions configured in the Symantec Management Console. By disabling the action that forwards or handles endpoint events, the agent stopssending those events to Enforce, so nothing appears there. This keeps the agent running on the endpoint but prevents visibility of its events in Enforce, which is exactly what you want when you need to hide those events without removing or reinstalling the agent. Reinstalling the agent or removing it from the console would be more disruptive and not specifically about hiding the events in Enforce, while clearing the agent cache only affects local data and does not stop events from being sent to Enforce.