Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS) — Question 128

Which artifact is used to uniquely identify a detected file?

Answer options

• A. file timestamp
• B. file extension
• C. file size
• D. file hash

Correct answer: D

Explanation

The correct answer is D, file hash, because it generates a unique string that represents the file's content, making it ideal for identification. The other options, such as file timestamp, file extension, and file size, can change or may not be unique to a specific file, leading to potential ambiguities in identification.