Cisco
500-275 · Question #3
Which set of actions would you take to create a simple custom detection?
The correct answer is A. Add a SHA-256 value; upload a file to calculate a SHA-256 value; upload a text file that contains. See the full explanation below for the reasoning.
Question
Which set of actions would you take to create a simple custom detection?
Options
- AAdd a SHA-256 value; upload a file to calculate a SHA-256 value; upload a text file that contains
- BUpload a packet capture; use a Snort rule; use a ClamAV rule.
- CManually input the PE header data, the MD-5 hash, and a list of MD-5 hashes.
- DInput the file and file name.
How the community answered
(64 responses)- A81% (52)
- B9% (6)
- C6% (4)
- D3% (2)
Community Discussion
No community discussion yet for this question.