ExamTopics Logo
Mail Us[email protected]
Menu
Cisco Discussions
exam questions

Exam 350-701 All Questions

View all questions & answers for the 350-701 exam
Go to Exam

Exam 350-701 topic 1 question 647 discussion

Actual exam question from Cisco's 350-701
Question #: 647
Topic #: 1
[All 350-701 Questions]

What must be configured on Cisco Secure Endpoint to create a custom detection file list to detect and quarantine future files?

  • A. Create an advanced custom detection and upload the hash of each file.
  • B. Add a network IP block allowed list to the configuration and add the blocked files.
  • C. Use the simple custom detection feature and add each detection to the list.
  • D. Configure an application control allowed applications list to block the files.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
by devildog at Aug. 20, 2024, 1:14 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Zikosheka
1 month, 2 weeks ago
Selected Answer: C
im going with C
upvoted 1 times
...
GongRoca
6 months, 2 weeks ago
SCD cannot quarantine a file, it can only allow, block and monitor. In this case the answer is A ACD (Advance custom detection).
upvoted 1 times
...
luismg
7 months, 2 weeks ago
Selected Answer: C
C with wimple should work https://www.cisco.com/c/en/us/support/docs/security/amp-endpoints/215176-configure-a-simple-custom-detection-list.html
upvoted 3 times
Surfside92
6 months ago
Correct C This document describes the steps to create a Simple Custom Detection list to detect, block and quarantine specific files
upvoted 1 times
...
...
klu16
8 months, 1 week ago
I'm not sure. Either A or C, for sure NOT D.
upvoted 1 times
Premium_Pils
8 months ago
Please avoid leaving a comment with a weak answer.
upvoted 3 times
...
...
devildog
8 months, 2 weeks ago
Selected Answer: A
I believe this is A.
upvoted 1 times
Premium_Pils
8 months ago
Belief against facts. Please, read through some corresponding Cisco documents before leaving an answer. It is actually C. (see why in the previous comment)
upvoted 1 times
Premium_Pils
2 weeks, 5 days ago
The funny thing is that this site does not save all my comments. I don't know what's the logic, which comments get published and which ones don't. Surely, they do not publish all, even with relevant content.
upvoted 1 times
...
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago