Securing Cisco Networks with Snort Free Sample Questions

Incident responders use which policy mode for outbreak control? A.AuditB.ProtectC.TriageD.Emergency

When you are viewing information about a computer, what is displayed? A.the type of antivirus software that is installedB.the internal IP addressC.when the operating system was installedD.the console settings

How can customers feed new intelligence such as files and hashes to FireAMP? A.by uploading it to the FTP serverB.from the connectorC.through the management consoleD.by sending it via email

What is the first system that is infected with a particular malware called? A.Patient ZeroB.SourceC.InfectorD.Carrier

A multinational financial institution is designing a Cisco AMP deployment. They require a solution where endpoints verify file disposition with a local appliance to minimize external traffic, but the appliance must maintain real-time synchronization with global threat intelligence without allowing direct inbound connections from the internet. Which architecture component and configuration best satisfies this requirement?

While analyzing the effectiveness of the Spero engine on Windows endpoints, an engineer notices that machine learning analysis is not occurring for certain files. What is the technical requirement regarding the file structure for the Spero engine to function correctly?

A security analyst is investigating a retrospective event. A file initially deemed 'Unknown' and allowed to run was later identified as malicious by the AMP Cloud. Which specific mechanism allows Cisco AMP to retroactively alert the administrator and provide the trajectory of this file?

Refer to the diagram. An organization has deployed Cisco AMP connectors. Based on the decision flow shown, what happens when the AMP Connector encounters a file that is NOT in its local cache?