Exam 210-260 topic 2 question 43 discussion

Actual exam question from Cisco's 210-260

Question #: 43
Topic #: 2

[All 210-260 Questions]

Which action does standard antivirus software perform as part of the file-analysis process?

A. execute the file in a simulated environment to examine its behavior
B. create a backup copy of the file
C. examine the execution instructions in the file
D. flag the unexamined file as a potential threat

Show Suggested Answer

Suggested Answer: C 🗳️

by lluu at Feb. 10, 2020, 2:37 p.m.

Comments

Submit Cancel

lluu

5 years, 4 months ago

The answer (C) is WRONG !!! on the test I answered C too but now I found C is WRONG !!! Based on the Cisco document below: this right answer is A. From Cisco document: https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-0/user_guide_fs/b_ESA_Admin_Guide_11_0/b_ESA_Admin_Guide_chapter_01011.pdf. I hope everyone get it right for this question. I did not double check all questions on this site... i failed my test :-(

upvoted 2 times

max80

5 years, 4 months ago

C is valid. sandbox it's feature of adviced AV like AMP.

upvoted 1 times

...

max80

5 years, 4 months ago

Question #48 Topic 2 What are two advanced features of the Cisco AMP solution for endpoints? (Choose two.) A. sandboxing B. reflection C. reputation D. foresight E. contemplation Correct Answer: AC

upvoted 1 times

...