350-701 Exam Dumps | A company discovered an attack propagating through their network via a file. A custom file policy was

<< Prev Question Next Question >>

Question 194/290

A company discovered an attack propagating through their network via a file. A custom file policy was created in order to track this in the future and ensure no other endpoints execute the infected file. In addition, it was discovered during testing that the scans are not detecting the file as an indicator of compromise. What must be done in order to ensure that the created is functioning as it should?

A. Send the file to Cisco Threat Grid for dynamic analysis

B. Upload the hash for the file into the policy

C. Create an IP block list for the website from which the file was downloaded

D. Block the application that the file was using to open

Question List (290q): Question 1: Which Cisco Advanced Malware protection for Endpoints deploy...; Question 2: Which solution protects hybrid cloud deployment workloads wi...; Question 3: Which feature within Cisco ISE verifies the compliance of an...; Question 4: Which CLI command is used to register a Cisco FirePower sens...; Question 5: Which Cisco security solution integrates with cloud applicat...; Question 6: Which VPN technology can support a multivendor environment a...; Question 7: Which open source tool does Cisco use to create graphical vi...; Question 8: Which Cisco AMP feature allows an engineer to look back to t...; Question 9: A network engineer has configured a NTP server on a Cisco AS...; Question 10: Which IETF attribute is supported for the RADIUS CoA feature...; Question 11: Using Cisco Cognitive Threat Analytics, which platform autom...; Question 12: A switch with Dynamic ARP Inspection enabled has received a ...; Question 13: What are two rootkit types? (Choose two)...; Question 14: An engineer is trying to securely connect to a router and wa...; Question 15: Which two features of Cisco DNA Center are used in a Softwar...; Question 16: What is a characteristic of an EDR solution and not of an EP...; Question 17: An administrator configures a Cisco WSA to receive redirecte...; Question 18: What is a language format designed to exchange threat intell...; Question 19: An organization is trying to improve their Defense in Depth ...; Question 20: Which Dos attack uses fragmented packets to crash a target m...; Question 21: Which standard is used to automate exchanging cyber threat i...; Question 22: An engineer is configuring Cisco WSA and needs to enable a s...; Question 23: An attacker needs to perform reconnaissance on a target syst...; Question 24: Why is it important to patch endpoints consistently?...; Question 25: An engineer integrates Cisco FMC and Cisco ISE using pxGrid ...; Question 26: A network engineer has been tasked with adding a new medical...; 1 commentQuestion 27: An administrator configures a new destination list in Cisco ...; Question 28: Which baseline form of telemetry is recommended for network ...; Question 29: An organization wants to use Cisco FTD or Cisco ASA devices....; Question 30: A small organization needs to reduce the VPN bandwidth load ...; Question 31: A network administrator is modifying a remote access VPN on ...; Question 32: Which benefit does DMVPN provide over GETVPN?...; Question 33: Which threat intelligence standard contains malware hashes?...; Question 34: What is the term for having information about threats and th...; Question 35: When planning a VPN deployment, for which reason does an eng...; Question 36: What is the process In DevSecOps where all changes In the ce...; Question 37: Refer to the exhibit. (Exhibit) What is a result of the conf...; Question 38: A security engineer must add destinations into a destination...; Question 39: An organization has noticed an increase in malicious content...; Question 40: Which functions of an SDN architecture require southbound AP...; Question 41: Which algorithm provides asymmetric encryption?...; Question 42: Which two risks is a company vulnerable to if it does not ha...; Question 43: Which form of attack is launched using botnets?...; Question 44: Refer to the exhibit. (Exhibit) Which configuration item mak...; Question 45: A network administrator needs to find out what assets curren...; Question 46: What is a difference between a DoS attack and a DDoS attack?...; Question 47: Which two deployment modes does the Cisco ASA FirePower modu...; Question 48: An engineer needs a solution for TACACS+ authentication and ...; Question 49: An organization has DHCP servers set up to allocate IP addre...; Question 50: An engineer is configuring cloud logging using a company-man...; Question 51: Which portion of the network do EPP solutions solely focus o...; Question 52: Drag and drop the features of Cisco ASA with Firepower from ...; Question 53: Which statement about IOS zone-based firewalls is true?...; Question 54: An organization is selecting a cloud architecture and does n...; Question 55: Which suspicious pattern enables the Cisco Tetration platfor...; Question 56: Which security solution is used for posture assessment of th...; Question 57: Drag and drop the posture assessment flow actions from the l...; Question 58: What is a difference between an XSS attack and an SQL inject...; Question 59: A company has 5000 Windows users on its campus. Which two pr...; Question 60: Which technology enables integration between Cisco ISE and o...; Question 61: Drag and drop the solutions from the left onto the solution'...; Question 62: Which problem Is solved by deploying a multicontext firewall...; Question 63: Which two statements about a Cisco WSA configured in Transpa...; Question 64: Which two preventive measures are used to control cross-site...; Question 65: Which configuration method provides the options to prevent p...; Question 66: Drag and drop the exploits from the left onto the type of se...; Question 67: What does the Cloudlock Apps Firewall do to mitigate securit...; Question 68: Drag and drop the descriptions from the left onto the encryp...; Question 69: What are two ways that Cisco Container Platform provides val...; Question 70: Which Cisco cloud security software centrally manages polici...; Question 71: Based on the NIST 800-145 guide, which cloud architecture ma...; Question 72: What is a difference between GETVPN and IPsec?...; Question 73: Which two commands are required when configuring a flow-expo...; Question 74: An engineer needs to configure an access control policy rule...; Question 75: What is a function of the Layer 4 Traffic Monitor on a Cisco...; Question 76: What does endpoint isolation in Cisco AMP for Endpoints secu...; Question 77: Which option is the main function of Cisco Firepower impact ...; Question 78: Which two components do southbound APIs use to communicate w...; Question 79: Which security product enables administrators to deploy Kube...; Question 80: What is the function of Cisco Cloudlock for data security?...; Question 81: An engineer used a posture check on a Microsoft Windows endp...; Question 82: An engineer needs to detect and quarantine a file named abc4...; Question 83: An administrator is configuring N I P on Cisco ASA via ASDM ...; Question 84: Which information is required when adding a device to Firepo...; Question 85: An engineer is trying to decide whether to use Cisco Umbrell...; Question 86: Which Cisco security solution provides patch management in t...; Question 87: What is a benefit of using Cisco FMC over Cisco ASDM?...; Question 88: Which CLI command is used to enable URL filtering support fo...; Question 89: Which Cisco security solution gives the most complete view o...; Question 90: In which form of attack is alternate encoding, such as hexad...; Question 91: What is a benefit of a Cisco Secure Email Gateway Virtual as...; Question 92: Which two fields are defined in the NetFlow flow? (Choose tw...; Question 93: A network security engineer must export packet captures from...; Question 94: For a given policy in Cisco Umbrella, how should a customer ...; Question 95: An administrator is establishing a new site-to-site VPN conn...; Question 96: Which action must be taken in the AMP for Endpoints console ...; Question 97: Which technology reduces data loss by identifying sensitive ...; Question 98: What are two ways a network administrator transparently iden...; Question 99: Which Talos reputation center allows for tracking the reputa...; Question 100: Which two protocols must be configured to authenticate end u...; Question 101: Refer to the exhibit. (Exhibit) Which command was used to di...; Question 102: Which solution should be leveraged for secure access of a CI...; Question 103: When using Cisco AMP for Networks which feature copies a fil...; Question 104: In which type of attack does the attacker insert their machi...; Question 105: Which benefit is provided by ensuring that an endpoint is co...; Question 106: What are two functionalities of northbound and southbound AP...; Question 107: Drag and drop the cryptographic algorithms for IPsec from th...; Question 108: A network administrator is configuring a rule in an access c...; Question 109: What are the two types of managed Intercloud Fabric deployme...; Question 110: What provides visibility and awareness into what is currentl...; Question 111: How does Cisco Workload Optimization portion of the network ...; Question 112: The Cisco ASA must support TLS proxy for encrypted Cisco Uni...; Question 113: How does DNS Tunneling exfiltrate data?...; Question 114: A Cisco ESA administrator has been tasked with configuring t...; Question 115: Which type of DNS abuse exchanges data between two computers...; Question 116: A network engineer is deciding whether to use stateful or st...; Question 117: An organization is trying to implement micro-segmentation on...; Question 118: Which algorithm is an NGE hash function?...; Question 119: What is a difference between FlexVPN and DMVPN?...; Question 120: What is a characteristic of traffic storm control behavior?...; Question 121: What is a function of 3DES in reference to cryptography?...; Question 122: Which feature does the laaS model provide?...; Question 123: Which Cisco platform processes behavior baselines, monitors ...; Question 124: Which license is required for Cisco Security Intelligence to...; Question 125: Which two parameters are used to prevent a data breach in th...; Question 126: When MAB is configured for use within the 802.1X environment...; Question 127: An organization has two systems in their DMZ that have an un...; Question 128: An engineer wants to generate NetFlow records on traffic tra...; Question 129: Which solution supports high availability in routed or trans...; Question 130: What is a functional difference between a Cisco ASA and a Ci...; Question 131: Which two kinds of attacks are prevented by multifactor auth...; Question 132: Which two mechanisms are used to control phishing attacks? (...; Question 133: What is the concept of Cl/CD pipelining?...; Question 134: What is a functional difference between Cisco Secure Endpoin...; Question 135: What provides total management for mobile and PC including m...; Question 136: An organization has a requirement to collect full metadata i...; Question 137: What are two characteristics of Cisco DNA Center APIs? (Choo...; Question 138: What are two workloaded security models? (Choose two)...; Question 139: Which solution is made from a collection of secure developme...; Question 140: Refer to the exhibit. (Exhibit) An engineer is implementing ...; Question 141: A network engineer has entered the snmp-server user andy myv...; Question 142: Due to a traffic storm on the network, two interfaces were e...; Question 143: Refer to the exhibit. (Exhibit) What is the function of the ...; Question 144: Which policy is used to capture host information on the Cisc...; Question 145: Which two probes are configured to gather attributes of conn...; Question 146: Which proxy mode must be used on Cisco WSA to redirect TCP t...; Question 147: A Cisco ISE engineer configures Central Web Authentication (...; Question 148: What is a characteristic of Dynamic ARP Inspection?...; Question 149: An engineer must modify a policy to block specific addresses...; Question 150: Which ASA deployment mode can provide separation of manageme...; Question 151: Which ESA implementation method segregates inbound and outbo...; Question 152: Which Cisco platform provides an agentless solution to provi...; Question 153: An organization received a large amount of SPAM messages ove...; Question 154: Why is it important to implement MFA inside of an organizati...; Question 155: Which cloud model is a collaborative effort where infrastruc...; Question 156: Drag and drop the cloud security assessment components from ...; Question 157: What Cisco command shows you the status of an 802.1X connect...; Question 158: Refer to the exhibit. (Exhibit) How does Cisco Umbrella mana...; Question 159: What is the result of running the crypto isakmp key ciscXXXX...; Question 160: How is data sent out to the attacker during a DNS tunneling ...; Question 161: After deploying a Cisco ESA on your network, you notice that...; Question 162: Which attribute has the ability to change during the RADIUS ...; Question 163: An organization uses Cisco FMC to centrally manage multiple ...; Question 164: An engineer enabled SSL decryption for Cisco Umbrella intell...; Question 165: Which cloud service model offers an environment for cloud co...; Question 166: Which DoS attack uses fragmented packets in an attempt to cr...; Question 167: What is a benefit of flexible NetFlow records?...; Question 168: What are two functions of IKEv1 but not IKEv2? (Choose two)...; Question 169: What is a benefit of using telemetry over SNMP to configure ...; Question 170: Which feature is leveraged by advanced antimalware capabilit...; Question 171: Drag and drop the Firepower Next Generation Intrusion Preven...; Question 172: Which protocol provides the strongest throughput performance...; Question 173: An engineer must force an endpoint to re-authenticate an alr...; Question 174: Which Cisco WSA feature supports access control using URL ca...; Question 175: With Cisco AMP for Endpoints, which option shows a list of a...; Question 176: Refer to the exhibit. (Exhibit) Consider that any feature of...; Question 177: In which cloud services model is the tenant responsible for ...; Question 178: Which type of algorithm provides the highest level of protec...; Question 179: What features does Cisco FTDv provide over ASAv?...; Question 180: An engineer is implementing NTP authentication within their ...; Question 181: Which two conditions are prerequisites for stateful failover...; Question 182: An engineer is configuring Cisco Umbrella and has an identit...; Question 183: Which open standard creates a framework for sharing threat i...; Question 184: Refer to the exhibit. (Exhibit) Which statement about the au...; Question 185: Which two endpoint measures are used to minimize the chances...; Question 186: What is the purpose of a denial-of-service attack?...; Question 187: Which two prevention techniques are used to mitigate SQL inj...; Question 188: What is the difference between EPP and EDR?...; Question 189: Which Cisco Firewall solution requires zone definition?...; Question 190: What is a description of microsegmentation?...; Question 191: An engineer wants to automatically assign endpoints that hav...; Question 192: Which feature enables a Cisco ISR to use the default bypass ...; Question 193: What must be configured in Cisco ISE to enforce reauthentica...; Question 194: A company discovered an attack propagating through their net...; Question 195: When configuring ISAKMP for IKEv1 Phase1 on a Cisco IOS rout...; Question 196: Which cryptographic process provides origin confidentiality,...; Question 197: Which IPS engine detects ARP spoofing?...; Question 198: An organization is receiving SPAM emails from a known malici...; Question 199: What is the function of the crypto is a kmp key cisc40639795...; Question 200: Refer to the exhibit. (Exhibit) An engineer must configure a...; Question 201: What are two security benefits of an MDM deployment? (Choose...; Question 202: A large organization wants to deploy a security appliance in...; Question 203: Which VPN technology can support a multivendor environment a...; Question 204: Which two methods must be used to add switches into the fabr...; Question 205: An organization wants to secure users, data, and application...; Question 206: When NetFlow is applied to an interface, which component cre...; Question 207: How does Cisco Umbrella archive logs to an enterprise owned ...; Question 208: Which two parameters are used for device compliance checks? ...; Question 209: Which threat involves software being used to gain unauthoriz...; Question 210: A network engineer is tasked with configuring a Cisco ISE se...; Question 211: What is a feature of container orchestration?...; Question 212: Which two are valid suppression types on a Cisco Next Genera...; Question 213: What is a feature of the open platform capabilities of Cisco...; Question 214: Refer to the exhibit. (Exhibit) When configuring a remote ac...; Question 215: An engineer is deploying Cisco Advanced Malware Protection (...; Question 216: An engineer is configuring 802.1X authentication on Cisco sw...; Question 217: Which technology must be used to implement secure VPN connec...; Question 218: Which two application layer preprocessors are used by Firepo...; Question 219: What is a benefit of using Cisco Tetration?...; Question 220: Which Cisco solution integrates Encrypted Traffic Analytics ...; Question 221: Refer to the exhibit. (Exhibit) What will happen when this P...; Question 222: Which Cisco security solution secures public, private, hybri...; Question 223: Which category includes DoS Attacks?...; Question 224: Which two request of REST API are valid on the Cisco ASA Pla...; Question 225: Drag and drop the VPN functions from the left onto the descr...; Question 226: An organization deploys multiple Cisco FTD appliances and wa...; Question 227: What are two Detection and Analytics Engines of Cognitive Th...; Question 228: What is the purpose of a NetFlow version 9 template record?...; Question 229: In which two ways does a system administrator send web traff...; Question 230: A network administrator configures Dynamic ARP Inspection on...; Question 231: An administrator is configuring a DHCP server to better secu...; Question 232: Which type of encryption uses a public key and private key?...; Question 233: During a recent security audit a Cisco IOS router with a wor...; Question 234: What are two workload security models? (Choose two.)...; Question 235: Which two tasks allow NetFlow on a Cisco ASA 5500 Series fir...; Question 236: What is the primary role of the Cisco Email Security Applian...; Question 237: When a next-generation endpoint security solution is selecte...; Question 238: Drag and drop the NetFlow export formats from the left onto ...; Question 239: What is the function of SDN southbound API protocols?...; Question 240: Which kind of API that is used with Cisco DNA Center provisi...; Question 241: Which public cloud provider supports the Cisco Next Generati...; Question 242: Which industry standard is used to integrate Cisco ISE and p...; Question 243: A Cisco Firepower administrator needs to configure a rule to...; Question 244: Which system facilitates deploying microsegmentation and mul...; Question 245: How does the Cisco WSA enforce bandwidth restrictions for we...; Question 246: Drag and drop the deployment models from the left onto the e...; Question 247: When wired 802.1X authentication is implemented, which two c...; Question 248: Which statement describes a traffic profile on a Cisco Next ...; Question 249: Which Cisco solution provides a comprehensive view of Intern...; Question 250: What is the purpose of the certificate signing request when ...; Question 251: An organization wants to implement a cloud-delivered and Saa...; Question 252: An organization is using Cisco Firepower and Cisco Meraki MX...; Question 253: What are two DDoS attack categories? (Choose two)...; Question 254: Client workstations are experiencing extremely poor response...; Question 255: Which product allows Cisco FMC to push security intelligence...; Question 256: Which group within Cisco writes and publishes a weekly newsl...; Question 257: Using Cisco Firepower's Security Intelligence policies, upon...; Question 258: An engineer is trying to decide whether to use Cisco Umbrell...; Question 259: How many interfaces per bridge group does an ASA bridge grou...; Question 260: What must be configured on Cisco Secure Endpoint to create a...; Question 261: What is the primary difference between an Endpoint Protectio...; Question 262: Refer to the exhibit. (Exhibit) An engineer configured wired...; Question 263: What are two recommended approaches to stop DNS tunneling fo...; Question 264: Refer to the exhibit. (Exhibit) A network engineer is testin...; Question 265: Which Cisco solution does Cisco Umbrella integrate with to d...; Question 266: How is DNS tunneling used to exfiltrate data out of a corpor...; Question 267: Which type of protection encrypts RSA keys when they are exp...; Question 268: An administrator is adding a new switch onto the network and...; Question 269: What is a prerequisite when integrating a Cisco ISE server a...; Question 270: Which two criteria must a certificate meet before the WSA us...; Question 271: An engineer is implementing DHCP security mechanisms and nee...; Question 272: Where are individual sites specified to be blacklisted in Ci...; Question 273: Drag and drop the security responsibilities from the left on...; Question 274: An engineer needs a cloud solution that will monitor traffic...; Question 275: Which two devices support WCCP for traffic redirection? (Cho...; Question 276: What can be integrated with Cisco Threat Intelligence Direct...; Question 277: An engineer needs to configure a Cisco Secure Email Gateway ...; Question 278: Which solution is more secure than the traditional use of a ...; Question 279: Which security solution protects users leveraging DNS-layer ...; Question 280: Which term describes when the Cisco Firepower downloads thre...; Question 281: An engineer is implementing Cisco CES in an existing Microso...; Question 282: Which solution stops unauthorized access to the system if a ...; Question 283: Which two types of connectors are used to generate telemetry...; Question 284: Which method must be used to connect Cisco Secure Workload t...; Question 285: A network engineer entered the snmp-server user asmith myv7 ...; Question 286: A Cisco FTD engineer is creating a new IKEv2 policy called s...; Question 287: An engineer is configuring AMP for endpoints and wants to bl...; Question 288: An engineer recently completed the system setup on a Cisco W...; Question 289: Which Cisco command enables authentication, authorization, a...; Question 290: Which characteristic is unique to a Cisco WSAv as compared t...

Question 194/290

LEAVE A REPLY

Download PDF File