An engineer is configuring Cisco Secure Endpoint to enhance security by preventing the execution of certain files by users. The engineer needs to ensure that the specific executable file name…

An advanced custom detection list is typically used for defining custom indicators of compromise (IOCs) for detection and blocking/quarantining, which might involve quarantine and is more complex than simply blocking an application.

Cisco Secure Endpoint's Application Control feature allows administrators to specify applications or executables by name (or other attributes) to be blocked from running on endpoints, fulfilling the requirement to block execution without quarantining.

A simple custom detection list is also for custom IOCs and may lead to quarantine, not just preventing execution.

Scheduled scans are for detecting and remediating threats, often involving quarantine or deletion, and do not specifically provide the granular control to *only* block execution of a known good (but unwanted) application without quarantining.