Implementing and Operating Cisco Security Core Technologies v1.1 (350-701 SCOR v1.1) Exam Materials - Question #491 Discussion

Comment Image Comment Image Comment Image

A security engineer obtains a list of malicious executables. The engineer must import the list in bulk to a custom detection rule in a Cisco Secure Endpoint. The detection rule will be used to detect potentially infected corporate Android mobile devices. If the rule matches, the executable must be stopped from executing automatically on the device. Which type of custom detection must the engineer configure? (Choose one answer)

  • A. blocked applications
  • B. Android custom detection
  • C. advanced custom detections
  • D. IP blocked lists
Correct Answer: B

Brave-Dump Community Votes

Answer: B (2 votes) 100%

Community Explanations & Comments (2)

HOSSAM ELDIN MOHAMED SA 3 months ago
Selected: B
Advanced are for complex hashes detection but android for specified already
MANAR ABDALLAH HAMED 3 months ago
Selected: B
hashes.apk