CCIE Security
Domain 5Objective 1
5.1 Cisco AMP for Networks, Cisco AMP for Endpoints, and Cisco AMP for Content Security (Cisco ESA, and Cisco WSA) CCIE-SECURITY Practice Questions (Page 3)
Part of the 5.0 Advanced Threat Protection and Content Security domain, which accounts for 20% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–2 from this objective — we provide 59 practice questions to prepare you well beyond it. (estimate)
59questions here
12free pages
10concepts
20%of the exam
Questions 11–15
- 11
In the AMP for Endpoints console, which report would you generate to see a summary of threats detected across all endpoints over a specific time period?
Select an answer first - 12
In which deployment mode does Cisco AMP for Networks operate when it uses a Firepower appliance in passive mode to monitor traffic?
Select an answer first - 13
A network administrator notices that AMP for Endpoints connectors are not reporting to the cloud. What is a common troubleshooting step?
Select an answer first - 14
What is the primary purpose of retrospective analysis in Cisco AMP for Networks?
Select an answer first - 15
Which technique does Cisco AMP for Networks use to analyze unknown files by executing them in a controlled environment?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.