Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Cisco 300-710 Exam - Topic 3 Question 49 Discussion

An engineer is troubleshooting a file that is being blocked by a Cisco FTD device on the network.The user is reporting that the file is not malicious.Which action does the engineer take to identify the file and validate whether or not it is malicious?
A) identify the file in the intrusion events and submit it to Threat Grid for analysis.
B) Use FMC file analysis to look for the file and select Analyze to determine its disposition.
C) Use the context explorer to find the file and download it to the local machine for investigation.
D) Right click the connection event and send the file to AMP for Endpoints to see if the hash is malicious.

Cisco 300-710 Exam - Topic 3 Question 49 Discussion

Actual exam question for Cisco's 300-710 exam
Question #: 49
Topic #: 3
[All 300-710 Questions]

An engineer is troubleshooting a file that is being blocked by a Cisco FTD device on the network.

The user is reporting that the file is not malicious.

Which action does the engineer take to identify the file and validate whether or not it is malicious?

Show Suggested Answer Hide Answer
Suggested Answer: A

Contribute your Thoughts:

0/2000 characters
Alita
10 months ago
D is a solid move if you want to check the hash quickly.
upvoted 0 times
...
Thomasena
10 months ago
C sounds risky, downloading files can be dangerous!
upvoted 0 times
...
Shakira
11 months ago
Wait, can we really trust Threat Grid's analysis?
upvoted 0 times
...
Leonida
11 months ago
I think B is more effective for analyzing the file directly.
upvoted 0 times
...
Ming
11 months ago
Option A is the best choice for file validation.
upvoted 0 times
...
Chaya
11 months ago
The key here is ensuring 24/7 availability during the holidays, so I think denying maintenance for a longer period like option B (Nov 1 - Feb 15) is the way to go.
upvoted 0 times
...
Aleisha
11 months ago
This question seems to be asking about how Ethernet virtual circuits can help service providers maximize the use of VLAN tags. I'll need to think carefully about the differences between the answer choices.
upvoted 0 times
...
Minna
11 months ago
This question seems straightforward - we just need to identify the three correct statements from the options provided based on Cyert and March's suggestions for resolving competing stakeholder objectives.
upvoted 0 times
...
Lemuel
11 months ago
Good point, Tonette. I think the two correct requirements are the IP address/FQDN of the Cisco Unity Connection servers and the end-user credentials.
upvoted 0 times
...
Glendora
11 months ago
I think I remember us discussing how SOA projects require more collaboration between business and tech... that sounds right.
upvoted 0 times
...

Save Cancel