300-220 CBRTHD: Conducting Threat Hunting and Defending using Cisco Technologies for Cybersecurity

By Cisco · Question Mode

QuestionQ35

Threat Hunting Techniques

After completing a vulnerability scan in the production environment, a security engineer finds that several hosts have the CVE-2019-0752 Microsoft Scripting Engine vulnerability. The engineer enables script protection in Cisco AMP to protect hosts against script attacks and flag script usage.

Which script interpreter is supported by the script protection feature?

Explanation

Cisco AMP Script Protection supports PowerShell (version 3 and later), along with specified Microsoft scripting technologies. It does not provide script-protection visibility or coverage for non-Microsoft interpreters such as Python or Ruby; Bash is also not a supported interpreter.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!