Exam 210-260 topic 2 question 10 discussion

Actual exam question from Cisco's 210-260

Question #: 10
Topic #: 2

Which technology can you implement to centrally mitigate potential threats when users on your network download files that might be malicious?

A. Verify that the company IPS blocks all known malicious websites.
B. Implement URL filtering on the perimeter firewall.
C. Enable file-reputation services to inspect all files that traverse the company network and block files with low reputation scores.
D. Verify that antivirus software is installed and up to date for all users on your network.

Show Suggested Answer

Suggested Answer: C 🗳️

by max80 at Jan. 20, 2020, 8:49 a.m.

Comments

Submit Cancel

smartcarter

5 years, 5 months ago

Of the three billion objects that employees requested during the first quarter of production for the East Cost, 52 percent were blocked because of a low reputation score. Low reputation cannot be a good thing. Source: https://www.cisco.com/c/en/us/solutions/collateral/enterprise/cisco-on-cisco/Cisco_IronPort_Web_Security_Appliance_final.html

upvoted 1 times

...

smartcarter

5 years, 5 months ago

Cisco email security appliances reject email from servers with low scores (below –3.0.) and rate-limit send-ers that have medium to low reputation scores. They can also white-list high reputation senders, such as IP addresses with +9.0 scores from Fortune 1000 organizations.

upvoted 1 times

...

max80

5 years, 5 months ago

Answer B Low reputation scores should be passed. High reputation files get scanned. https://www.cisco.com/c/dam/en/us/td/i/400001-500000/410001-420000/415001-416000/415735.tif/_jcr_content/renditions/415735.jpg

upvoted 1 times

...