A network engineer is logged into the Cisco AMP for Endpoints console and sees a malicious verdict for an identified SHA-256 hash. Which configuration is needed to mitigate this threat?
A) Add the hash to the simple custom detection list
B) Use regular expressions to block the malicious file
C) Enable a personal firewall in the infected endpoint
D) Add the hash from the infected endpoint to the network block list

Question

Quizplus · Accepted Answer

Adding the hash to the simple custom detection list will ensure that the identified malicious file is blocked and detected across all endpoints managed by Cisco AMP for Endpoints.

A Network Engineer Is Logged into the Cisco AMP for Endpoints