Valid 350-701 Dumps shared by ExamDiscuss.com for Helping Passing 350-701 Exam! ExamDiscuss.com now offer the newest 350-701 exam dumps, the ExamDiscuss.com 350-701 exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com 350-701 dumps with Test Engine here:
An engineer is configuring AMP for endpoints and wants to block certain files from executing. Which outbreak control method is used to accomplish this task?
Correct Answer: C
The application blocking list is an outbreak control method that allows the administrator to block certain files from executing on the endpoints based on their SHA values. This can prevent malware from running on the endpoints and causing damage. The other options are not outbreak control methods, but rather different features of AMP for endpoints. Device flow correlation is a network analysis feature that monitors connections and detects malicious activity. Simple detections and advanced custom detections are custom rules that can be created by the administrator to detect and block files based on signatures or other criteria. References: * Configure Windows Policy in AMP for Endpoints - Cisco * Prevent, Detect and Respond with Cisco AMP for Endpoints