Which alert signals when unknown programs are blocked?

• A. Reclassified Files Alerts
• B. Blocked Programs Alerts
• C. Alerts Configuration
• D. Malware Detection Alerts

Answer: (B)

When the endpoint security system encounters software it doesn’t recognize or trust, it can prevent that software from running and generate a notification for administrators. The alert category that directly reflects this action—blocking unknown programs—is Blocked Programs Alerts. This type of alert is specifically for events where the policy prevents execution of untrusted executables, allowing you to review and decide whether to trust the program or adjust the policy.

Other alerts cover different events: Reclassified Files Alerts deal with changes in file classifications, Alerts Configuration relates to how alerts are set up and delivered, and Malware Detection Alerts trigger when malicious software is detected. The block of unknown programs is a distinct execution-control event, so Blocked Programs Alerts is the most accurate fit.