An engineer must protect their company against ransomware attacks. Which solution allows the engineer to block the execution stage and prevent file encryption?
A) Use Cisco Firepower and block traffic to TOR networks.
B) Use Cisco AMP deployment with the Malicious Activity Protection engine enabled.
C) Use Cisco Firepower with Intrusion Policy and snort rules blocking SMB exploitation.
D) Use Cisco AMP deployment with the Exploit Prevention engine enabled.

Question

Quizplus · Accepted Answer

Cisco AMP (Advanced Malware Protection) with the Malicious Activity Protection engine enabled is designed to detect and block malicious activities, including the execution stage of ransomware, thereby preventing file encryption.

An Engineer Must Protect Their Company Against Ransomware Attacks