SNCF — Securing Networks with Firepower — Question 119

The administrator notices that there is malware present with an .exe extension and needs to verify if any of the systems on the network are running the executable file. What must be configured within Cisco AMP for Endpoints to show this data?

Answer options

• A. vulnerable software
• B. file analysis
• C. threat root cause
• D. prevalence

Correct answer: D

Explanation

The correct answer is D, prevalence, as it provides insights into the occurrence of specific files across the network, including .exe files. Options A and B do not directly relate to monitoring execution status, while C focuses on identifying the source of the threat rather than its occurrence.