Exam 300-710 topic 1 question 133 discussion

Reset Connection indeed.

Cisco recommends that you enable Reset Connection for the Block Files and Block Malware actions to prevent blocked application sessions from remaining open until the TCP connection resets. If you do not reset connections, the client session will remain open until the TCP connection resets itself. Answer - Reset connection

Action Resets Connection? Block Files yes (recommended) Block Malware yes (recommended) Detect Files no Malware Cloud Lookup no

It cannot be A: Malware Cloud Lookup: This action queries the AMP cloud to determine if files traversing your network contain malware. It allows you to obtain and log the file’s disposition based on its SHA-256 hash value. However, it allows the file through regardless of the disposition

"Cisco recommends that you enable Reset Connection for the Block Files and Block Malware actions to prevent blocked application sessions from remaining open until the TCP connection resets. If you do not reset connections, the client session will remain open until the TCP connection resets itself. " https://www.examtopics.com/discussions/cisco/view/54536-exam-300-710-topic-1-question-133-discussion/

it is A, The question is (Which Cisco AMP file rule action within the Cisco FMC must be set to resolve this issue?) there is no Reset Connection option.

Correct answer is: B

What they said

Reset connection

It is understood should be reset connection.

Reset Connection