A company is using Cisco Secure Endpoint and wants to improve detection of zero-day malware by leveraging global threat intelligence. The security team wants to ensure that files are submitted to the AMP cloud for analysis when they are not recognized locally. Which configuration is required?

Set the file reputation check to 'Block' for unknown files

Enable local signature updates only

Configure the connector to use 'TETRA' scan mode

Enable cloud lookup and set the action for unknown files to 'Submit'

What is the primary purpose of reports in Cisco Secure Endpoint?

To manage user accounts in the console

To configure the connectors' network settings

To update the malware signatures

To provide visibility into endpoint protection status and threat activity

Which of the following is a typical action that can be configured in a Cisco Secure Endpoint policy when a malicious file is detected?

Uninstall the application that created the file

CiscoCertified Network Professional Security

Domain 5Objective 5

5.5 Configure Endpoint Antimalware Protection Using Cisco Secure Endpoint 350-701 Practice Questions (Page 3)

Part of the Endpoint Protection and Detection domain, which accounts for 15% of the 350-701 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–2 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

8concepts

15%of the exam

Questions 11–15

11application · medium
A company is using Cisco Secure Endpoint and wants to improve detection of zero-day malware by leveraging global threat intelligence. The security team wants to ensure that files are submitted to the AMP cloud for analysis when they are not recognized locally. Which configuration is required?
Select an answer first
12foundation · easy
Which detection method in Cisco Secure Endpoint uses a database of known malware hashes to identify malicious files?
Select an answer first
13foundation · easy
What is the primary purpose of reports in Cisco Secure Endpoint?
Select an answer first
14foundation · easy
Which of the following is a typical action that can be configured in a Cisco Secure Endpoint policy when a malicious file is detected?
Select an answer first
15foundation · easy
Which deployment model for Cisco Secure Endpoint provides management through a cloud-based console and does not require an on-premises management server?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-701” is a trademark of its owner, used for identification only.

5.5 Configure Endpoint Antimalware Protection Using Cisco Secure Endpoint 350-701 Practice Questions (Page 3)

Questions 11–15

A company is using Cisco Secure Endpoint and wants to improve detection of zero-day malware by leveraging global threat intelligence. The security team wants to ensure that files are submitted to the AMP cloud for analysis when they are not recognized locally. Which configuration is required?

Which detection method in Cisco Secure Endpoint uses a database of known malware hashes to identify malicious files?

What is the primary purpose of reports in Cisco Secure Endpoint?

Which of the following is a typical action that can be configured in a Cisco Secure Endpoint policy when a malicious file is detected?

Which deployment model for Cisco Secure Endpoint provides management through a cloud-based console and does not require an on-premises management server?

Keep studying — Endpoint Protection and Detection