A security engineer must create a malware and file policy on a Cisco Secure Firewall Threat Defense device. The solution must ensure that PDF, DOCX, and XLSX files are not sent to Cisco Secure…

The correct answer is B. local malware analysis. Local malware analysis (B) performs file disposition lookups and SHA-256 hash comparisons locally on the FTD device using the local malware database, without uploading file content to Cisco Secure Malware Analytics (the cloud sandbox, formerly Threat Grid). Dynamic analysis (D)…

Configuration

Question

A security engineer must create a malware and file policy on a Cisco Secure Firewall Threat Defense device. The solution must ensure that PDF, DOCX, and XLSX files are not sent to Cisco Secure Malware Analytics. What must be configured to meet the requirements?

Options

ASpero analysis
Blocal malware analysis
Ccapacity handling
Ddynamic analysis

How the community answered

(44 responses)

A
2% (1)
B
84% (37)
C
9% (4)
D
5% (2)

Explanation

Local malware analysis (B) performs file disposition lookups and SHA-256 hash comparisons locally on the FTD device using the local malware database, without uploading file content to Cisco Secure Malware Analytics (the cloud sandbox, formerly Threat Grid). Dynamic analysis (D) is the feature that submits file samples to the cloud sandbox - enabling it would send those file types to the cloud, violating the requirement. Spero analysis (A) is a machine-learning heuristic that also runs locally but is specifically for executable files, not Office documents or PDFs. Capacity handling (C) controls what happens to files when the device is resource-constrained, not whether files are sent to the cloud.

Topics

#Cisco FTD#Malware Policy#Local Analysis#File Type Control

Community Discussion

No community discussion yet for this question.

Full 300-710 Practice