5.4 Describe Endpoint Protection and Detection Security with Solutions Such as Cisco Secure Client and Cisco Secure Malware Analytics 350-701 Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A hospital is deploying Cisco Secure Client to its staff. The compliance team requires that only devices with up-to-date antivirus definitions and a specific operating system patch level can access the hospital's internal network. Which Cisco Secure Client module should be configured to enforce this requirement?

   • ASecure Client Posture module
   • BSecure Client VPN module
   • CSecure Client Network Access Manager
   • DSecure Client Umbrella module
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A company has deployed Cisco Secure Client with the Umbrella and Posture modules. They are now integrating Cisco Secure Malware Analytics (Threat Grid) to improve detection of unknown malware. The security team wants to automatically submit suspicious files that are blocked by the endpoint protection policy to Threat Grid for analysis, and then use the resulting indicators to update the endpoint policy. Which integration approach best achieves this automated workflow?

   • AConfigure the Secure Client to send all blocked file hashes to Threat Grid via API
   • BManually download the file from the endpoint and upload it to the Threat Grid web console
   • CEnable the Secure Client's built-in sandboxing feature to analyze files locally
   • DUse the Threat Grid API to submit the actual file samples from the endpoint, then use the resulting indicators to update the Umbrella and Posture policies
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which deployment mode is commonly used by Cisco Secure Client to provide remote access VPN connectivity?

   • ASite-to-site VPN mode
   • BAlways-on VPN mode
   • CClientless SSL VPN mode
   • DIPsec passthrough mode
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A company is using Cisco Secure Client for remote access. The security team wants to ensure that remote users are connected to the VPN before they can access any network resources. Which feature should be configured to enforce this?

   • ANetwork Access Manager with 802.1X
   • BAlways-On VPN
   • CPosture module with a compliance check
   • DUmbrella module with roaming protection
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   How do Cisco Secure Client and Cisco Secure Malware Analytics work together to enhance endpoint detection and response?

   • ASecure Client submits suspicious files to Secure Malware Analytics for deep analysis, and the results are used to improve detection.
   • BSecure Malware Analytics replaces Secure Client as the primary endpoint agent.
   • CSecure Client provides the sandboxing environment for Secure Malware Analytics.
   • DSecure Malware Analytics manages the VPN connections for Secure Client.
   Reveal Solution Discussion Select an answer first