Which component in Cisco AMP for Networks is responsible for performing file reputation lookups and sandboxing analysis?

Firepower Threat Defense (FTD) or Firepower appliance

What is the primary function of the 'malware detection' capability in Cisco AMP for Endpoints?

To monitor user activity for policy violations

To encrypt sensitive data on the endpoint

To detect and block malicious files on the endpoint

To block network traffic from malicious IP addresses

When investigating a detection in the AMP for Endpoints console, what does the 'File Trajectory' view provide?

The list of endpoints that have the same file

The file's hash and reputation score

A list of all files on the endpoint

A graphical timeline of a file's activity, including its origin and execution path

How does Cisco AMP for Content Security integrate with Cisco ESA to provide advanced threat protection for email?

By using the ESA as a proxy for all web traffic

By installing a connector on the ESA

By sending email attachments to the AMP cloud for file reputation and sandboxing

By blocking all email attachments by default

CCIE Security

Domain 5Objective 1

5.1 Cisco AMP for Networks, Cisco AMP for Endpoints, and Cisco AMP for Content Security (Cisco ESA, and Cisco WSA) CCIE-SECURITY Practice Questions (Page 1)

Part of the 5.0 Advanced Threat Protection and Content Security domain, which accounts for 20% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–2 from this objective — we provide 59 practice questions to prepare you well beyond it. (estimate)

59questions here

12free pages

10concepts

20%of the exam

Questions 1–5

1foundation · easy
Which component in Cisco AMP for Networks is responsible for performing file reputation lookups and sandboxing analysis?
Select an answer first
2foundation · easy
What is the primary function of the 'malware detection' capability in Cisco AMP for Endpoints?
Select an answer first
3foundation · easy
In the Cisco AMP for Endpoints console, which tab would you use to view a list of all endpoints that have the connector installed and their health status?
Select an answer first
4foundation · easy
When investigating a detection in the AMP for Endpoints console, what does the 'File Trajectory' view provide?
Select an answer first
5foundation · easy
How does Cisco AMP for Content Security integrate with Cisco ESA to provide advanced threat protection for email?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCIE-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.