Cisco 300-710 Exam - Topic 3 Question 49 Discussion
An engineer is troubleshooting a file that is being blocked by a Cisco FTD device on the network.The user is reporting that the file is not malicious.Which action does the engineer take to identify the file and validate whether or not it is malicious?
A) identify the file in the intrusion events and submit it to Threat Grid for analysis.
B) Use FMC file analysis to look for the file and select Analyze to determine its disposition.
C) Use the context explorer to find the file and download it to the local machine for investigation.
D) Right click the connection event and send the file to AMP for Endpoints to see if the hash is malicious.
Alita
10 months agoThomasena
10 months agoShakira
11 months agoLeonida
11 months agoMing
11 months agoChaya
11 months agoAleisha
11 months agoMinna
11 months agoLemuel
11 months agoGlendora
11 months ago