5.10 Cisco Advanced Threat Solutions and Their Integration: Cisco Stealthwatch, Cisco FMC, Cisco AMP, Cisco CTA, Threat Grid, ETA, Cisco WSA, Cisco SMA, Cisco Threat Response, and Cisco Umbrella CCIE-SECURITY Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   How does Cisco WSA integrate with Cisco AMP to enhance web threat protection?

   • AWSA replaces AMP's endpoint protection capabilities.
   • BWSA uses AMP to block all encrypted web traffic.
   • CWSA sends files downloaded from the web to AMP for advanced malware analysis.
   • DWSA provides DNS-layer security for AMP.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the primary role of Cisco Security Management Appliance (SMA)?

   • ATo analyze malware files in a sandbox environment.
   • BTo provide a firewall for network segmentation.
   • CTo centralize management and reporting for multiple email and web security appliances.
   • DTo provide DNS-layer security for outbound requests.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which integration allows SMA to share email threat data with other Cisco security products?

   • ASMA integrates with Cisco FMC to manage firewall policies.
   • BSMA integrates with Cisco Umbrella to block malicious domains.
   • CSMA integrates with Cisco Threat Response to share indicators of compromise.
   • DSMA integrates with Cisco Stealthwatch to provide network visibility.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the primary purpose of Cisco Threat Response (CTR)?

   • ATo analyze malware files in a sandbox environment.
   • BTo manage firewall policies across multiple devices.
   • CTo provide DNS-layer security for blocking malicious domains.
   • DTo orchestrate and automate incident response across integrated security products.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   How does Cisco Threat Response integrate with other Cisco security solutions?

   • AIt provides the underlying operating system for all Cisco security appliances.
   • BIt aggregates alerts and observables from products like FMC, AMP, and WSA into a single incident view.
   • CIt replaces the need for all other security products.
   • DIt only works with third-party security products, not Cisco products.
   Reveal Solution Discussion Select an answer first