5.10 Cisco Advanced Threat Solutions and Their Integration: Cisco Stealthwatch, Cisco FMC, Cisco AMP, Cisco CTA, Threat Grid, ETA, Cisco WSA, Cisco SMA, Cisco Threat Response, and Cisco Umbrella CCIE-SECURITY Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is the key feature of Cisco Advanced Malware Protection (AMP) that enables retrospective analysis?

   • AIt continuously monitors file behavior and can retroactively detect and remediate threats.
   • BIt only scans files at the time of download and never re-evaluates them.
   • CIt blocks all encrypted traffic to prevent malware from hiding.
   • DIt relies on signature-based detection only, with no behavioral analysis.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   How does Cisco AMP integrate with other security solutions to enhance threat detection?

   • AAMP provides DNS-layer security to block malicious domains.
   • BAMP replaces the need for a firewall by blocking malicious traffic at the network level.
   • CAMP only works standalone and cannot integrate with other products.
   • DAMP shares file reputation and disposition data with other Cisco products like FMC and Threat Response.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is the primary purpose of Cisco Cognitive Threat Analytics (CTA)?

   • ATo provide a firewall for blocking malicious traffic.
   • BTo manage endpoint security policies.
   • CTo replace the need for a web proxy.
   • DTo use machine learning to detect threats in encrypted web traffic.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which data source does Cisco CTA primarily use to detect threats in encrypted traffic?

   • ADNS query logs from external resolvers.
   • BNetFlow and other telemetry data from network devices.
   • CFull packet captures of all encrypted sessions.
   • DEndpoint file reputation data.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the primary function of Cisco Threat Grid?

   • ATo provide DNS-layer security for blocking malicious domains.
   • BTo manage firewall policies across multiple devices.
   • CTo encrypt all network traffic to prevent eavesdropping.
   • DTo analyze malware samples in a sandboxed environment and provide detailed threat intelligence.
   Reveal Solution Discussion Select an answer first