A security analyst deployed Cisco Secure Endpoint across the organization. After a new custom-built internal application was rolled out, the Secure Endpoint connectors on several workstations quarantined the application's main executable, disrupting business operations. Investigation confirms the file is safe and the detection was a false positive. The analyst must restore the file on the affected endpoints and prevent Secure Endpoint from quarantining it again in the future. Which action set accomplishes both goals?