Exam 350-701 topic 1 question 449 discussion

I agree with the others. Some links that currently work: https://blogs.cisco.com/security/endpoint-protection-and-least-prevalence https://www.cisco.com/c/en/us/products/collateral/security/fireamp-endpoints/datasheet-c78-733181.html https://docs.amp.cisco.com/low-prevalence-malware-retrospective-quarantine.pdf

The Cisco AMP feature that allows the engineering team to determine whether a file is installed on a selected few workstations is: A. file prevalence File prevalence is a feature of Cisco AMP (Advanced Malware Protection) that enables the security team to determine how many endpoints in the organization have a particular file installed, and how frequently the file is seen across the environment. This information can be used to identify potentially risky files that are installed on a small number of workstations and take appropriate action to remediate the issue. By using file prevalence, the engineering team can monitor the prevalence of files on selected few workstations, and if any potentially risky file is detected, they can take action to protect those workstations from malware.

A is correct Prevalence: AMP displays all files that are running across your organization, ordered by prevalence, to help you surface previously undetected threats seen by a small number of users. Files opened by only a few users may be malicious.