A network administrator reviews the file report for the last month and notices that all file types, except exe, show a disposition of unknown. What is the cause of this issue?
A.
Only Spero file analysis is enabled.
B.
The Cisco FMC cannot reach the Internet to analyze files.
C.
A file policy has not been applied to the access policy.
D.
The malware license has not been applied to the Cisco FTD.
A is the answer.
First Time File Analysis: Determines what to do when you see a file for the first time. This likely means that the file has not been seen on the internet before, and so its disposition is unknown. Most new files will be clean, but you can send them to the ThreatGRID® Cloud for analysis, to increase global awareness, and our own. The file must match a rule configured to perform a malware cloud lookup and Spero, local malware, or dynamic analysis. If you disable this option, files detected for the first time are marked with an Unknown disposition.
First Time File Analysis: Determines what to do when you see a file for the first time. This likely means that the file has not been seen on the internet before, and so its disposition is unknown. Most new files will be clean, but you can send them to the ThreatGRID® Cloud for analysis, to increase global awareness, and our own. The file must match a rule configured to perform a malware cloud lookup and Spero, local malware, or dynamic analysis.
If you disable this option, files detected for the first time are marked with an Unknown disposition.
I believe answer is A.
https://www.cisco.com/c/en/us/td/docs/security/firepower/623/configuration/guide/fpmc-config-guide-v623/file_policies_and_advanced_malware_protection.html
upvoted 3 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
whysohardwhy
1 week, 1 day agomatan24
5 months, 2 weeks agofelagund
6 months, 2 weeks ago