nerdexam
Cisco

300-720 · Question #56

Which type of attack is prevented by configuring file reputation filtering and file analysis features?

The correct answer is B. zero-day. File reputation filtering checks files against Cisco Talos's threat intelligence database of known malware. File analysis (sandboxing) detonates unknown files in a controlled environment to detect malicious behavior that has never been seen before. Together, these two features…

Cisco ESA Spam Control and Anti-Malware

Question

Which type of attack is prevented by configuring file reputation filtering and file analysis features?

Options

  • Adenial of service
  • Bzero-day
  • Cbackscatter
  • Dphishing

How the community answered

(24 responses)
  • A
    8% (2)
  • B
    88% (21)
  • D
    4% (1)

Explanation

File reputation filtering checks files against Cisco Talos's threat intelligence database of known malware. File analysis (sandboxing) detonates unknown files in a controlled environment to detect malicious behavior that has never been seen before. Together, these two features are specifically designed to counter zero-day attacks (B) - threats that exploit previously unknown vulnerabilities or use novel malware with no existing signature. DoS attacks (A) are network-level. Backscatter (C) is an email bounce abuse issue. Phishing (D) is a social engineering attack targeting users, not file-based payloads.

Topics

#File Reputation Filtering#File Analysis#Zero-Day Attacks#Advanced Malware Protection

Community Discussion

No community discussion yet for this question.

Full 300-720 Practice