5. Describe the Capabilities of Cisco Security Platforms and APIs (XDR, Firepower, Umbrella, Secure Endpoint, ISE, and Secure Malware Analytics) 200-901 Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   An organization deploys Cisco Secure Endpoint on all endpoints. They want to automatically isolate an endpoint from the network when a high-severity malware alert is detected, and they want this action to be triggered via an API call from their SOAR platform. Which capability of Secure Endpoint supports this?

   • ASandboxing via API
   • BNetwork access control via API
   • CThreat containment via API
   • DDNS-layer blocking via API
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A network team manages multiple Firepower NGFWs across several sites. They need to push a new intrusion prevention policy to all devices from a central location and verify that the policy was applied. Which approach should they use?

   • AUse the Firepower Management Center API to deploy the policy to all managed devices and check deployment status
   • BUse the Secure Endpoint API to deploy the policy to Firepower devices
   • CLog in to each Firepower device's local CLI and apply the policy individually
   • DUse the Umbrella API to push the policy to all Firepower devices
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   What is the primary purpose of Cisco Secure Malware Analytics (Threat Grid)?

   • ATo provide endpoint detection and response capabilities
   • BTo provide DNS-layer security for all network traffic
   • CTo provide a sandboxing environment for dynamic analysis of suspicious files
   • DTo provide network access control based on user identity
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   What is the primary security function of Cisco Umbrella?

   • AIt manages user authentication and network access policies for wired and wireless devices
   • BIt performs deep packet inspection on all network traffic to detect malware signatures
   • CIt sandboxes suspicious files in a virtual environment to observe their behavior
   • DIt provides DNS-layer security by blocking requests to malicious domains before a connection is made
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   What is the primary purpose of Cisco Secure Endpoint (formerly AMP for Endpoints)?

   • ATo provide centralized management of firewall policies
   • BTo provide advanced malware protection and endpoint detection and response capabilities on endpoint devices
   • CTo provide network access control for wired and wireless devices
   • DTo provide DNS-layer security for all network traffic
   Reveal Solution Discussion Select an answer first