Which Cisco AMP for Endpoints, what is meant by simple custom detection?

The correct answer is B. It is a method for identifying and quarantining a specific file by its SHA-256 hash. Simple Custom Detection in Cisco AMP for Endpoints is a straightforward mechanism that lets an administrator specify a file's SHA-256 hash to be detected and quarantined across all endpoints in the policy. It is 'simple' because it targets one specific file by its exact hash…

Configuration

Question

Options

AIt is a rule for identifying a file that should be whitelisted by Cisco AMP.
BIt is a method for identifying and quarantining a specific file by its SHA-256 hash.
CIt is a feature for configuring a personal firewall.
DIt is a method for identifying and quarantining a set of files by regular expression language.

How the community answered

(55 responses)

A
7% (4)
B
87% (48)
C
4% (2)
D
2% (1)

Explanation

Simple Custom Detection in Cisco AMP for Endpoints is a straightforward mechanism that lets an administrator specify a file's SHA-256 hash to be detected and quarantined across all endpoints in the policy. It is 'simple' because it targets one specific file by its exact hash value. Option A describes whitelisting (the opposite action). Option C describes firewall functionality, which is unrelated. Option D describes the more advanced custom detection feature, which uses regular expressions or signature-like rules to target a set of files rather than a single one.

Topics

#Cisco AMP for Endpoints#Custom Detection#SHA-256#Malware Detection

Community Discussion

No community discussion yet for this question.

Full 300-710 Practice