Question 371 · 654 in bank
A university policy must allow open access to resources on the Internet for research, but internal workstations are exposed to malware. Which Cisco AMP feature allows the engineering team to determine whether a file is installed on a selected few workstations?
Show answer
Answer: A
Explanation
The Cisco AMP feature that allows the engineering team to determine whether a file is installed on a selected few workstations is: A. file prevalence File prevalence is a feature of Cisco AMP (Advanced Malware Protection) that enables the security team to determine how many endpoints in the organization have a particular file installed, and how frequently the file is seen across the environment. This information can be used to identify potentially risky files that are installed on a small number of workstations and take appropriate action to remediate the issue. By using file prevalence, the engineering team can monitor the prevalence of files on selected few workstations, and if any potentially risky file is detected, they can take action to protect those workstations from malware.
Source: Adapted from community discussion — sull3y