Implementing and Operating Cisco Security Core Technologies (SCOR) — Question 93

A Cisco ESA network administrator has been tasked to use a newly installed service to help create policy based on the reputation verdict. During testing, it is discovered that the Cisco ESA is not dropping files that have an undetermined verdict. What is causing this issue?

Answer options

• A. The policy was created to send a message to quarantine instead of drop.
• B. The file has a reputation score that is below the threshold.
• C. The file has a reputation score that is above the threshold.
• D. The policy was created to disable file analysis.

Correct answer: B

Explanation

The correct answer is B because if the reputation score of the file is below the threshold, the Cisco ESA will not drop it. Options A and D are incorrect since they refer to the actions taken by the policy rather than the reputation score. Option C is also incorrect as a high reputation score would not be the reason for undetermined verdicts not being dropped.