5.10 Cisco Advanced Threat Solutions and Their Integration: Cisco Stealthwatch, Cisco FMC, Cisco AMP, Cisco CTA, Threat Grid, ETA, Cisco WSA, Cisco SMA, Cisco Threat Response, and Cisco Umbrella CCIE-SECURITY Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which statement best describes how Cisco Stealthwatch integrates with other security solutions to provide network visibility and anomaly detection?

   • AIt relies solely on endpoint agents to collect traffic data and sends alerts to the SIEM.
   • BIt uses NetFlow to collect network telemetry and shares this data with other tools for enhanced visibility and detection.
   • CIt performs deep packet inspection on all traffic and blocks malicious flows in real time.
   • DIt replaces the firewall in the network to provide visibility and access control.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   How does Threat Grid integrate with other Cisco security products?

   • AIt shares malware analysis results and indicators of compromise with products like AMP and FMC.
   • BIt provides the underlying operating system for Cisco firewalls.
   • CIt blocks all malicious traffic at the network perimeter.
   • DIt replaces the need for an email security appliance.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the key technique used by Cisco Encrypted Traffic Analytics (ETA) to detect threats in encrypted traffic?

   • ABlocking all encrypted traffic to prevent malware from hiding.
   • BUsing endpoint agents to inspect the content of encrypted sessions.
   • CDecrypting all SSL/TLS traffic using a man-in-the-middle proxy.
   • DAnalyzing flow metadata and using machine learning to identify malicious patterns.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which Cisco product is commonly used to enable Encrypted Traffic Analytics (ETA) in a network?

   • ACisco SMA
   • BCisco Umbrella
   • CCisco AMP
   • DCisco Stealthwatch
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the primary function of Cisco Web Security Appliance (WSA)?

   • ATo analyze malware files in a sandbox environment.
   • BTo provide DNS-layer security for all internal domains.
   • CTo manage email security policies.
   • DTo provide secure web gateway services, including URL filtering and malware protection.
   Reveal Solution Discussion Select an answer first