Which two features of Cisco AMP for Endpoints allow for an uploaded file to be blocked? (Choose two.)

Cisco AMP for Endpoints (now Cisco Secure Endpoint) provides administrators with granular control to block specific files. The two primary features for this are 'Application Blocking' and 'Simple Custom Detection'.
1. Application Blocking: This feature is part of the Application Control settings within an endpoint policy. Administrators can create custom lists of applications to block, identifying them by their SHA-256 hash, path, or name. This directly prevents the execution of a specific file.
2. Simple Custom Detection: Located under Outbreak Control, this feature allows an administrator to add a file's SHA-256 hash to a global list and assign a 'Block' or 'Quarantine' disposition. This provides a rapid way to block a malicious file across the entire organization, independent of specific policies.

C. file repository: The file repository is a storage and analysis tool for files submitted from endpoints; it does not directly enforce blocking actions.
D. exclusions: Exclusions are used to prevent AMP from blocking or detecting trusted files, which is the opposite of the required action.
E. application whitelisting: This is a restrictive policy that blocks all applications not explicitly allowed, rather than a feature for blocking a specific, targeted file.

1. Cisco Secure Endpoint User Guide: In the "Policies" chapter, the "Application Control" section details the creation of block lists. It states, "Application Control allows you to create custom lists of applications to be blocked in your organization... You can add applications to a list by SHA-256, by path and file name, or by name." This directly supports option A.

2. Cisco Secure Endpoint User Guide: The "Outbreak Control" chapter, under the "Custom Detections" section, describes Simple Custom Detections. It specifies, "You can create simple custom detections for your organization based on SHA-256s. You can add individual SHA-256s to a simple custom detection list with a Block or Quarantine disposition." This directly supports option B.

3. Cisco Secure Endpoint User Guide: The "Analysis" chapter, in the "File Repository" section, describes its function: "The File Repository allows you to search for and manage files that have been submitted for analysis from your organization's hosts." This confirms the repository is for analysis, not blocking, making option C incorrect.