The administrator notices that there is malware present with an .exe extension and needs to verify if any of the systems on the network are running the executable file. What must be configured within

'Vulnerable software' reports on known software vulnerabilities, not on the presence or execution of a specific malware file across the network.

'File analysis' involves submitting a file to a sandbox for dynamic analysis to confirm if it's malicious, but it does not show its widespread presence across multiple endpoints.

'Threat root cause' provides a detailed forensic timeline for a specific detected threat on a single endpoint, showing its actions, but not its prevalence across the entire network.

The 'prevalence' feature in Cisco AMP for Endpoints (now Secure Endpoint) provides visibility into how widely a specific file (identified by its SHA256 hash) has been observed across the protected endpoints, allowing an administrator to quickly see which systems have encountered or are running a particular executable.