Exam 350-701 topic 1 question 638 discussion

Indicators of Compromise (IOCs) are used in cybersecurity to detect and respond to potential threats by identifying malicious behaviors, files, or network activity. In Cisco Secure Endpoint, IOCs can be manually added to improve threat detection for new or evolving attacks. 🔹 Why is Option C Correct? Cisco Secure Endpoint allows administrators to define custom advanced detections based on specific IOCs (e.g., file hashes, IPs, domains, behaviors). This customization enhances malware detection and response by including new threats that may not yet be covered by Cisco’s global intelligence.

Based on: https://www.cisco.com/c/en/us/support/docs/security/advanced-malware-protection-endpoints/118899-technote-malwareprotection-00.html#anc5 I think B is correct.