300-710 · Question #13
Which two features of Cisco AMP for Endpoints allow for an uploaded file to be blocked? (Choose two.)
The correct answer is A. application blocking B. simple custom detection. Application blocking (A) allows administrators to block specific applications from executing, based on application identity or hash, preventing file uploads or execution from those apps. Simple custom detection (B) allows administrators to upload SHA-256 file hashes into a…
Question
Which two features of Cisco AMP for Endpoints allow for an uploaded file to be blocked? (Choose two.)
Options
- Aapplication blocking
- Bsimple custom detection
- Cfile repository
- Dexclusions
- Eapplication whitelisting
How the community answered
(29 responses)- A93% (27)
- C3% (1)
- D3% (1)
Explanation
Application blocking (A) allows administrators to block specific applications from executing, based on application identity or hash, preventing file uploads or execution from those apps. Simple custom detection (B) allows administrators to upload SHA-256 file hashes into a custom blocklist, so any file matching those hashes is immediately blocked. Exclusions (D) whitelists items and does nothing to block. Application whitelisting (E) is the opposite of blocking - it permits only approved apps. File repository (C) is for storing files for analysis, not directly blocking them.
Topics
Community Discussion
No community discussion yet for this question.