nerdexam
Cisco

500-275 · Question #3

Which set of actions would you take to create a simple custom detection?

The correct answer is A. Add a SHA-256 value; upload a file to calculate a SHA-256 value; upload a text file that contains. See the full explanation below for the reasoning.

Question

Which set of actions would you take to create a simple custom detection?

Options

  • AAdd a SHA-256 value; upload a file to calculate a SHA-256 value; upload a text file that contains
  • BUpload a packet capture; use a Snort rule; use a ClamAV rule.
  • CManually input the PE header data, the MD-5 hash, and a list of MD-5 hashes.
  • DInput the file and file name.

How the community answered

(64 responses)
  • A
    81% (52)
  • B
    9% (6)
  • C
    6% (4)
  • D
    3% (2)

Community Discussion

No community discussion yet for this question.

Full 500-275 Practice