What is the maximum SHA level of filtering that Threat Intelligence Director supports?

The correct answer is D. SHA-256. Cisco Threat Intelligence Director (TID) in Firepower Management Center uses SHA-256 as its maximum supported hash algorithm for observable filtering. SHA-256 produces a 256-bit hash and is the industry standard for file-based threat intelligence feeds (e.g., STIX/TAXII). TID…

Configuration

Question

Options

ASHA-1024
BSHA-4096
CSHA-512
DSHA-256

How the community answered

(67 responses)

A
4% (3)
B
1% (1)
C
1% (1)
D
93% (62)

Explanation

Cisco Threat Intelligence Director (TID) in Firepower Management Center uses SHA-256 as its maximum supported hash algorithm for observable filtering. SHA-256 produces a 256-bit hash and is the industry standard for file-based threat intelligence feeds (e.g., STIX/TAXII). TID uses these hashes to identify malicious files in network traffic. SHA-512, SHA-1024, and SHA-4096 are not supported by TID.

Topics

#Threat Intelligence Director#SHA#Security filtering#Cisco Secure Network Analytics

Community Discussion

No community discussion yet for this question.

Full 300-710 Practice