Which action best reduces IOC noise from a known exercise by muting matches?

• A. Ask Gemini to list IOCs from the exercise.
• B. Filter IOCs with ingestion time matching the exercise period.
• C. Navigate to IOC Matches and mute the IOCs from the exercise.
• D. Review IOCs with Indicator Confidence Score ≥ 80%.

Answer: (C)

Muting matches in the IOC Matches view directly silences those indicators so they won’t trigger alerts or show up as noise during the exercise. This targets the known, benign indicators you’re exercising with, letting you focus on new or relevant signals without losing access to the IOC data for later review. It’s the most straightforward and effective way to reduce noise because you’re explicitly telling the system to ignore those matches while keeping the data intact for auditing. Other approaches either don’t suppress alerts automatically (listing IOCs), only constrain what you see by time windows (ingestion-based filtering) or screen for high-confidence items without silencing the known exercise indicators.