View all questions & answers for the Implementing and Operating Cisco Security Core Technologies v1.1 (350-701 SCOR v1.1) Exam Materials exam


Implementing and Operating Cisco Security Core Technologies v1.1 (350-701 SCOR v1.1) Exam Materials-Question 316 Discussion
Comment Image Comment Image Comment Image

Which action adds IOCs to customize detections for a new attack? (Choose one answer)

  • A. Use the Initiate Endpoint IOC scan feature to gather the IOC information and push it to clients.
  • B. Add a custom advanced detection to include the IOCs needed within Cisco Secure Endpoint.
  • C. Modify the base policy within Cisco Secure Endpoint to include simple custom detections.
  • D. Upload the IOCs into the Installed Endpoint IOC feature within Cisco Secure Endpoint.
Correct Answer: B

Brave-Dump Clients Votes

D 50%
B 50%

Comments



Anonymous User 2026-07-17 00:34:57

Selected Answers: D


Why not d ?

Brave-Dumps.com Admin 2026-07-17 12:35:45

Selected Answers: B


B is the correct:
Advanced Custom Detection is used to create and deploy custom signatures for newly identified attacks or threats. It allows the administrator to add the required indicators to a custom detection set and then apply it to endpoint policies. In comparison, Installed Endpoint IOC is mainly used to scan endpoints for existing signs of compromise, not to create a customized detection for a new attack.

https://www.cisco.com/c/en/us/support/docs/security/secure-endpoint/217688-create-an-advanced-custom-detection-list.html