5.10 Cisco Advanced Threat Solutions and Their Integration: Cisco Stealthwatch, Cisco FMC, Cisco AMP, Cisco CTA, Threat Grid, ETA, Cisco WSA, Cisco SMA, Cisco Threat Response, and Cisco Umbrella CCIE-SECURITY Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is the primary security function of Cisco Umbrella?

   • ATo provide DNS-layer security by blocking requests to malicious domains.
   • BTo provide a web proxy for URL filtering.
   • CTo manage firewall policies across multiple devices.
   • DTo analyze malware files in a sandbox environment.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which integration capability is provided by Cisco Stealthwatch when deployed alongside Cisco Firepower?

   • AStealthwatch sends flow-based alerts to Firepower for automated blocking.
   • BStealthwatch replaces Firepower's intrusion prevention system.
   • CStealthwatch only monitors cloud traffic and ignores on-premises data.
   • DStealthwatch provides the firewall policy engine for Firepower.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   How does Cisco Umbrella integrate with other advanced threat solutions?

   • AIt replaces the need for a firewall by blocking all malicious traffic.
   • BIt shares DNS threat intelligence with Cisco Threat Response and can block domains identified by other tools.
   • CIt provides the underlying operating system for Cisco security appliances.
   • DIt only works as a standalone product and cannot integrate with other Cisco products.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the primary role of Cisco Firepower Management Center (FMC) in a security architecture?

   • ATo centrally manage and distribute policies to multiple Firepower devices.
   • BTo provide DNS-layer security for outbound web requests.
   • CTo replace the need for a firewall by providing network segmentation.
   • DTo perform deep packet inspection on all traffic in real time.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which integration allows FMC to share threat intelligence with other Cisco security products?

   • AFMC integrates with Cisco Threat Response to share indicators of compromise (IOCs).
   • BFMC integrates with Cisco AMP to replace endpoint protection.
   • CFMC integrates with Cisco Stealthwatch to replace its analytics engine.
   • DFMC integrates with Cisco Umbrella to provide firewall rules.
   Reveal Solution Discussion Select an answer first