SNCF — Securing Networks with Firepower — Question 313

What is a valid Cisco AMP file disposition?

Answer options

• A. non-malicious
• B. malware
• C. known-good
• D. pristine

Correct answer: B

Explanation

The correct answer is B, 'malware', as it indicates that the file is confirmed to be harmful. The other options, while they may describe file states, do not represent a valid disposition that Cisco AMP would classify a file under when it's identified as a threat.