nerdexam
Cisco

350-701 · Question #1

What are two list types within Cisco AMP for Endpoints Outbreak Control? (Choose two.)

The correct answer is B. simple custom detections D. allowed applications. Within Cisco AMP for Endpoints Outbreak Control, 'simple custom detections' and 'allowed applications' are two key list types used to manage file execution.

Submitted by haruto_sh· Mar 30, 2026Endpoint Protection and Detection

Question

What are two list types within Cisco AMP for Endpoints Outbreak Control? (Choose two.)

Exhibit

350-701 question #1 exhibit

Options

  • Ablocked ports
  • Bsimple custom detections
  • Ccommand and control
  • Dallowed applications
  • EURL

How the community answered

(41 responses)
  • A
    2% (1)
  • B
    95% (39)
  • E
    2% (1)

Why each option

Within Cisco AMP for Endpoints Outbreak Control, 'simple custom detections' and 'allowed applications' are two key list types used to manage file execution.

Ablocked ports

Blocked ports is a network firewall or security group configuration, not a list type within Cisco AMP's Outbreak Control for endpoint file execution.

Bsimple custom detectionsCorrect

Simple custom detections allow administrators to quickly create rules based on file hashes to block specific malicious executables or patterns as part of an outbreak response.

Ccommand and control

Command and control refers to a type of malicious communication channel, not a configurable list type within Cisco AMP for Endpoints Outbreak Control.

Dallowed applicationsCorrect

Allowed applications lists specify executables or files that should always be permitted to run, providing a whitelist that prevents them from being quarantined or blocked during an outbreak.

EURL

URL lists are used for web filtering or blocking access to specific web addresses, which is distinct from the endpoint file execution control provided by AMP's Outbreak Control.

Concept tested: Cisco AMP for Endpoints Outbreak Control lists.

Source: https://www.cisco.com/c/en/us/td/docs/security/amc/amp_private_cloud/AMP_Private_Cloud_Admin_Guide.pdf

Topics

#AMP for Endpoints#Outbreak Control#simple custom detections#allowed applications

Community Discussion

No community discussion yet for this question.

Full 350-701 Practice