Security Center File Extension Names: PDF Files

PDF Files

Question

Under 'File extension names' in the Automation file uploads section in Security Center, you see the pdf file extension.

What does this indicate?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

Correct Answer: C

Enabling the content analysis capability makes sure that files and email attachments can automatically be uploaded to the cloud for additional inspection in Automated investigation.

Hence, only option C is correct.

Option A, C and D are incorrect as pdf file extension in auto file doesn't block pdf files or trigger any automated soc investigations.

Reference:

The presence of the PDF file extension in the File extension names section in the Automation file uploads section of Security Center indicates that PDF files are being monitored by the automated investigation feature of Security Center.

However, the exact behavior of this feature is not clear from the given information. It is important to note that the behavior of automated investigations can be configured by the Security Center user, and the presence of a file extension in the File extension names section does not necessarily indicate a specific behavior.

Option A, which states that PDF documents will be ignored by automated investigations, is not a correct explanation based on the given information. Option B, which states that PDF documents will always trigger an automated investigation, is also not a correct explanation based on the given information.

Option C, which states that PDF attachments will be sent to the cloud for additional inspection, is a possible behavior that could be configured for automated investigations. This would mean that PDF files are flagged for additional inspection by cloud-based security services, such as Microsoft Defender ATP or Azure Security Center.

Option D, which states that PDF attachments will be blocked, is not a correct explanation based on the given information. It is important to note that blocking is a separate feature in Security Center and is not necessarily related to the automated investigation feature.

In summary, the presence of the PDF file extension in the File extension names section indicates that PDF files are being monitored by the automated investigation feature of Security Center, but the exact behavior of this feature is not clear from the given information.