A security engineer is deploying Cisco Secure Endpoint to detect a zero day malware attack with an SHA-256 hash of 47ea931f3e9dc23ec0b0885a80663e30ea013d493f8e88224b570a0464084628. What must be config

Access control rules are typically used on network firewalls to permit or deny traffic based on network parameters, not to block files by hash on endpoints.

Correlation policies are used to link multiple events or indicators to identify complex threats, not for direct action on a single known malicious hash.

Transform sets are cryptographic parameters used in IPSec VPNs to define encryption and authentication protocols, unrelated to malware detection by hash.

A custom detection list (often called a custom blacklist or custom indications of compromise) in Cisco Secure Endpoint allows administrators to upload specific SHA-256 hashes of known malicious files. Once configured, Secure Endpoint uses these hashes to immediately detect, block, or quarantine any matching files found on endpoints.