Discuss Cisco 300-740 Exam Topic 1 Question 15

A security analyst detects an employee endpoint making connections to a malicious IP on the internet and downloaded a file named Test0511127691C.pdf. The analyst discovers the machine is infected by trojan malware. What must the analyst do to mitigate the threat using Cisco Secure Endpoint?

AIdentify the malicious IPs and place them in a blocked list

BCreate an IP Block list and add the IP address of the affected endpoint

CEnable scheduled scans to detect and block the executable files

DStart isolation of the machine on the Computers tab

Suggested Answer: D

Get Premium 300-740 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

26 comments · newest first

Earleen 2 days ago

Isolating the machine stops further damage.

Rodolfo 7 days ago

Why D?

Earleen 12 days ago

I think D is the best choice.

Rodolfo 17 days ago

This question is tricky.

Kristine 22 days ago

Let’s hope we don’t face this in the exam!

Estrella 27 days ago

I feel like D is a must-do.

Silvana 1 month ago

Plus, it gives time to analyze.

Miesha 1 month ago

Exactly, we need to act fast!

Ula 1 month ago

D stops the threat right away.

Kristine 2 months ago

Blocking the IPs is important, but…

Estrella 2 months ago

C could help later, but not immediate.

Miesha 2 months ago

I agree with Silvana, D is crucial.

Ula 2 months ago

A is good too, but not enough.

Silvana 2 months ago

It prevents further damage.

Kristine 2 months ago

Why isolation?

Silvana 3 months ago

I think D is the best choice.

Kristine 3 months ago

This scenario is tricky.

Dalene 3 months ago

I disagree, the IP block list won't help if the malware is already on the machine.

Veda 3 months ago

Wait, how did they even download a file named that? Sounds sketchy.

Jeannetta 3 months ago

Scheduled scans are good, but isolation should come first.

Albina 3 months ago

I think blocking the malicious IPs is a must too.

Miles 4 months ago

Definitely need to isolate that machine ASAP!

Oren 4 months ago

I vaguely recall something about creating IP block lists, but I wonder if that’s more of a long-term solution. Could option B be relevant?

Kristal 5 months ago

I practiced a similar question where we had to deal with malware. I think enabling scheduled scans is useful, but it might not be the immediate step needed here.

Jerry 6 months ago

I'm not entirely sure, but I feel like blocking the malicious IPs could help too. Maybe option A?

Leslie 6 months ago

I remember we discussed the importance of isolating infected machines to prevent further spread. I think option D might be the right choice.

Cisco 300-740 Exam - Topic 1 Question 15 Discussion