Cisco Exam 350-701 Topic 5 Question 88 Discussion

Actual exam question for Cisco's 350-701 exam

Question #: 88
Topic #: 5

Which action must be taken in the AMP for Endpoints console to detect specific MD5 signatures on endpoints and then quarantine the files?

AConfigure an advanced custom detection list.

BConfigure an IP Block & Allow custom detection list

CConfigure an application custom detection list

DConfigure a simple custom detection list

Show Suggested Answer

Suggested Answer: D

When the Cisco Secure Firewall downloads threat intelligence updates from Cisco Talos, it is engaged in 'consumption.' This term refers to the process of receiving and utilizing threat intelligence data to enhance security measures. Cisco Talos provides comprehensive threat intelligence that Cisco Secure Firewall consumes to update its threat detection and prevention capabilities.

by Tayna at May 19, 2024, 01:29 AM

Limited Time Offer

25%

Off

Get Premium 350-701 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Royal

2 hours ago

A custom detection list is definitely the way to go here. Now, if only I could get my hands on some sick MD5 dance moves, I'd be all set!

upvoted 0 times

...

Cyril

3 days ago

D is too simple, and B doesn't sound like it would detect MD5 signatures. I'm going with A, it seems the most comprehensive option.

upvoted 0 times

...

Brice

4 days ago

Hmm, I'm not sure. I was leaning towards C, but now I'm second-guessing myself. This question is tricky!

upvoted 0 times

...

Dean

15 days ago

I'm pretty sure the answer is A. Configure an advanced custom detection list. That sounds like the most appropriate option for detecting MD5 signatures and quarantining files.

upvoted 0 times

...