Which action should you take when Cisco Threat Response notifies you that AMP has identified a file as malware?

exams 300-710 V1 300-710 exam 0 Comments

Which action should you take when Cisco Threat Response notifies you that AMP has identified a file as malware?
A . Add the malicious file to the block list.
B. Send a snapshot to Cisco for technical support.
C. Forward the result of the investigation to an external threat-analysis engine.
D. Wait for Cisco Threat Response to automatically block the malware.

Answer: A