An engineer must configure Cisco AMP for Endpoints so that it contains a list of files that should not be executed by users. These files must not be quarantined. Which action meets this…

Advanced custom detection lists are typically used for defining custom indicators of compromise (IOCs) and often trigger quarantine or other response actions, not just blocking execution without quarantine.

Simple custom detection is generally used for identifying files based on hash or name and often leads to detection and quarantine, not solely preventing execution without quarantine.

Identifying network IPs and placing them in a blocked list is a network-level control for blocking access to IP addresses, not for preventing specific files from executing on endpoints.

Cisco AMP for Endpoints' Application Control feature allows administrators to create a blocked applications list, which specifically prevents designated executables from running on endpoints without quarantining the files themselves, thereby meeting the requirement.