350-701 Endpoint Protection and Detection Practice Question
Which component of Cisco AMP for Endpoints is responsible for preventing the execution of known malware by checking files against a continuously updated cloud database before they run?
⚠ Common exam trap
Cisco often tests the distinction between pre-execution cloud-based reputation checks (File Reputation) and runtime behavioral protection (Exploit Prevention), so candidates mistakenly choose Exploit Prevention because they associate it with blocking malware execution, but it does not use cloud lookups.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
File Reputation
File Reputation is the correct answer because it is the Cisco AMP for Endpoints component that queries a continuously updated cloud database (the AMP Threat Grid) to check the reputation of a file before it executes. If the file is known malware, execution is blocked immediately, preventing the threat from running. This pre-execution check relies on the file's SHA-256 hash and cloud-based reputation scoring.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Exploit Prevention
Why it's wrong here
Exploit Prevention targets exploit techniques, not file reputation.
- ✗
Application Control
Why it's wrong here
Application Control manages whitelisting/blacklisting of applications.
- ✓
File Reputation
Why this is correct
File Reputation checks files against Talos intelligence to block known malware.
- ✗
Orbital
Why it's wrong here
Orbital is for forensic queries, not real-time file checking.
Go deeper
Related to this question
About these practice questions
One of 978 original 350-701 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.